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About this guide 



This guide provides information about: 

• Using the High Availability Fabric Manager (HAFM) to monitor, configure, and manage the 
Fibre Channel in which managed products operate. 

• Managing fabric zoning and HAFM logs. 

Intended audience 

This guide is intended for use by data center administrators, LAN administrators, operations 
personnel, and customer support personnel who: 

• Administer user access to the HAFM application. 

• Monitor and manage product operation. 

Related documentation 

For a list of corresponding documentation, refer to the related documents section of the release 
notes that came with the product. 

For the latest information, documentation, and firmware releases, please visit the following 
StorageWorks web site: 

http://h1 8006.www1 .hp.com/storage/saninfrastructure.html 

For information about Fibre Channel standards, visit the Fibre Channel Association web site. 

http:/ / www.fibrechannel.org 
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Document conventions and symbols 



Table 1 Document conventions 



Convention 


Element 


Medium blue text: Figure 1 


Cross-reference links and e-mail addresses 


Medium blue, underlined text 

I httn" / /www hn rnml 


Web site addresses 


Bold font 


• Kpv nnmp^ 

I \c y 1 1 \A I 1 1 

• Text typed into a GUI element, such as into a box 

• GUI elements that are clicked or selected, such as menu and 
list items, buttons, and check boxes 


Italics font 


Text emphasis 


Monospace font 


• File and directory names 

• System output 

• Code 

• Tpyt tv/npn nt thp rnmmnnn- inp 

1 1 ai iy 1 \A 1 MIC > V/ 1 1 1 1 1 1 — 1 1 1 \Jl 1 1 1 1 c 


Monospace, italic font 


• Code variables 

• Command-line variables 


Monospace, bold font 


Emphasis of file and directory names, system output, code, and 
text typed at the command line 



A WARNING! Indicates that failure to follow directions could result in bodily harm or death. 



A CAUTION: Indicates that failure to follow directions could result in damage to equipment or data. 



|^ IMPORTANT: Provides clarifying information or specific instructions. 



[if NOTE: Provides additional information. 
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# TIP: Provides helpful hints and shortcuts. 



Rack stability 



A WARNING! To reduce the risk of personal injury or damage to equipment: 

• Extend leveling jacks to the floor. 

• Ensure that the full weight of the rack rests on the leveling jacks. 

• Install stabilizing feet on the rack. 

In multiple-rack installations, secure racks together. 

• Extend only one rack component at a time. Racks may become unstable if more than one 
component is extended. 



HP technical support 

Telephone numbers for worldwide technical support are listed on the HP support web site: 

http://www.hp.com/support/ . 

Collect the following information before calling: 

• Technical support registration number (if applicable) 

• Product serial numbers 

• Product model names and numbers 

• Applicable error messages 

' Operating system type and revision level 

• Detailed, specific questions 

For continuous quality improvement, calls may be recorded or monitored. 

HP strongly recommends that customers sign up online using the Subscriber's choice web site at 

http:/ / www.hp.com/ go/e-updates . 

• Subscribing to this service provides you with e-mail updates on the latest product enhancements, 
newest versions of drivers, and firmware documentation updates as well as instant access to 
numerous other product resources. 

• After signing up, you can quickly locate your products by selecting Business support and then 
Storage under Product Category. 

HP-authorized reseller 

For the name of your nearest HP-authorized reseller: 

In the United States, call 1-800-345-1518. 

• Elsewhere, visit the HP web site: http://www.hp.com . Then click Contact HP to find locations 
and telephone numbers. 
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Helpful web sites 

For third-party product information, see the following HP web sites: 

• http:/ / www.hp.com 

• http:/ / www.hp.com/ go/ storage 

• http://www.hp.com/support/ 

• http://www.docs.hp.com 
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HAFM overview 



The HAFM is a Java-based GUI that enables you to manage users and products, monitor products, 
and open Element Managers. 

This chapter describes the following topics: 

• HAFM components, page 19 

• SAN life cycle, page 22 

• Searching the online Help, page 23 

• System requirements, page 23 

HAFM components 

The HAFM application is installed on the 1 U rack-mount appliance (HAFM appliance) to provide 
local access to managed products. HAFM client applications can also be installed on remote user 
workstations to provide remote access to the managed products through the HAFM appliance. 
Figure 1 shows an example of an HAFM configuration. 

Figure 1 Product management options 




HAFM appliance 

The HAFM appliance provides a central point of control for managed Fibre Channel products. The 
HAFM appliance is required for installing, configuring, and managing these products. 

Refer to the HA-Fabhc Manager installation guide for details about the HAFM appliance. 
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[ST NOTE: Although products can perform normal operations without an HAFM appliance, the HAFM 
appliance should operate at all times to monitor product operations, report failures, log event 
changes, and log configuration changes. 



HAFM application 

The application is composed of two parts: the appliance (which runs only on the HAFM appliance) 
and the client. The server is installed on one HAFM appliance and stores storage area network 
(SAN)-related information; it does not have a user interface. To view SAN information through a 
user interface, you must log in to the server running on the appliance through a client. 



|Sf NOTE: The server and clients may reside on the same machine, or on separate machines. 

Client communication 

In most configurations, the server calls the client whenever it has new data. 

In some cases, a network may utilize virtual private network (VPN) or firewall technology, which 
can prohibit communication between the server application running on HAFM appliances and 
clients. In this situation, the application automatically detects the network configuration and runs 
the client in polling mode. See "Configuring HAFM through a firewall" on page 169. 

Dual LANs on the HAFM appliance 

When two LANs are connected at the HAFM appliance, Microsoft Windows and the HAFM 
application designate one as the public LAN, and the other as the private LAN. 

• The private LAN is for communication between the HAFM appliance and the directors and edge 
switches that the HAFM appliance manages. 

The public LAN is for communication between the HAFM appliance and computers seeking 
remote client access to the HAFM appliance. 

Either LAN connection on the HAFM appliance can be the public LAN or the private LAN. The 
directors and edge switches can be managed via either LAN; however, only the public LAN 
supports remote client access. 

The title bar of the main window of the HAFM application shows the IP address of the public LAN. 
Public and private LAN designations 

In a dual LAN configuration, both LANs must be connected when the HAFM appliance boots. If 
only one is connected, the HAFM appliance interprets this as a single LAN configuration, and the 
connected LAN is designated as the public LAN. 

The HAFM application designates the public LAN as the first LAN detected whose IP address is not 
the reserved private subnet 1 0.x. x.x. Thus, if neither IP address is 1 0.x. x.x, the first LAN detected by 
the HAFM application is designated as the public LAN. This order of detection is influenced by 
Microsoft Windows and not guaranteed. 
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There are a two ways to ensure the pubic and private designations of the LANs. 

• Assign the private LAN IP address, lO.x.x.x, to the LAN you want designated as the private 
LAN. You must also have the public LAN connection active when the HAFM appliance is 
booting up. 

• Configure a specified Ethernet interface on the HAFM appliance to be the public LAN by 
manually editing a file on the HAFM appliance to explicitly specify which IP address the HAFM 
application should use as the public LAN. 

Perform the following to configure an Ethernet interface: 

• Open the config. properties file in directory C: \Program Files\HAFM\, and add 
the following line: 

ServerRmiIpAddress=x. x. x. x 

where x.x.x.x is the IP address assigned to the Ethernet LAN adapter which is to be used 
as the public LAN. This entry is case sensitive and must be made exactly as shown. After this 
line has been added, reboot the HAFM appliance. 



[|f NOTE: Rebooting the server does not impact the Fibre Channel operations of any edge switch or 
director. Only monitoring switch operations, logging events, and implementing configuration 
changes are interrupted. 

Remote access to the public LAN 

If the public LAN IP address of the HAFM appliance is changed, you must edit the 
config. properties file to reflect the new IP address. 

Remote workstations are not supported on the secondary adapter, and must always connect to the 
public adapter. 

For details on configuring remote workstations, see "Configuring remote workstations" on 
page 225. 

Out-of-band access 

Besides the HAFM application and Element Managers on the HAFM appliance, out-of-band 
(non-Fibre Channel) management access to HP directors and switches is provided through the 
following: 

■ A simple network management protocol (SNMP) agent implemented through the 
HAFM application. Administrators on SNMP management workstations can access product 
management information using any standard network management tool. Administrators can 
assign IP addresses and corresponding community names for up to 12 SNMP workstations 
functioning as SNMP trap message recipients. 

The Internet, using the Embedded Web Server (EWS) interface installed on the director or 
switch. This interface supports configuration, statistics monitoring, and basic operation of the 
product, but does not offer all the capabilities of the corresponding Element Manager in HAFM. 
Administrators launch the web server interface from a remote PC by entering the product's IP 



HA-Fabric Manager user guide 21 



address as the Internet URL, and then entering a user name and password at a login screen. The 
PC browser then becomes a management console. 

* A PC-based Telnet session using the command line interface (CLI). Any platform that 
supports Telnet client software can be used. 



SAN life cycle 



The HAFM application enables you to proceed through the four stages of the managed life cycle of 
the SAN with confidence. Table 2 describes the different stages in the life cycle. 

At any point, a discovered SAN can be used as a starting point to plan a new SAN, completing 
the life cycle. 



MONITOR f ) | DISCC 

Figure 2 SAN life cycle 

Table 2 Stages of a SAN life cycle 



ICO VE R 



Stage 


Task 


Description 


1 


Plan the SAN 


The administrator uses paper and pen 
or a software application to plan the 
SAN. 


2 


Discover the SAN 


The HAFM application establishes 
contact with many SAN devices, 
gathers embedded information, and 
presents a visual map of devices and 
their connections as a 
Physical/Topology map 


3 


Configure the SAN 


The administrator configures SAN 
devices and fabrics. 


4 


Monitor the SAN 


The self-monitoring, event-logging, and 
event notification application 
generates events and messages about 
product and property status. The user 
interface features an animated display 
of the data flow and error rates over 
the entire topology. 
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Searching the online Help 

To find help topics that contain a particular word or phrase: 

1. On the Help window, click the tab with the magnifying glass icon. 

2. In the Find field, enter the word or phrase for which you want to search. 

3. Press Enter. 

If any matches are found, a list of topics displays in the panel. The number of times the word or 
phrase occurs in the topic displays next to the name. 

4. Click the name to display that topic. 

System requirements 

HAFM has the following requirements. 

HAFM appliance system requirements 

The server running the HAFM application must meet the following requirements for Windows or 
Solaris platforms. When setting up your HAFM appliance, use the recommended configuration. 

Hf NOTE: A maximum of 25 Clients are allowed per HAFM appliance. 



[ff NOTE: The HAFM appliance supports up to 48 HP directors or switches (managed products). 
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HAFM client system requirements 



|?f NOTE: The client system running HAFM must meet the following requirements. A maximum of 8 
clients is allowed per HAFM appliance. 



Table 3 Windows system requirements 



Processor 


1 GHz Intel Pentium III and up 


Hardware 


CD-ROM 


Operating system 


Windows 2000 Professional with 
service pack 3 

Windows NT 4.0 with service 
pack 6a 


Memory 


1 GB RAM (minimum) 


Disk space 


350 MB disk space 


Video requirements 


8 MB video RAM 


Resolution 


256 colors 


Table 4 Solaris system requirements 


Models 


Ultra 1 0 and up 


Processor 


UltraSparclli or greater 


Hardware 


CD-ROM 


Operating system 


Solaris 7, 8, or 9 


Memory 


512 MB RAM (minimum) 


Disk space 


350 MB disk space 


Video requirements 


8 MB video RAM 


Resolution 


256 colors 
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2 Using the HAFM application 



This chapter provides instructions for using the HAFM application. The following topics are 
described: 

• Managing the appliance, page 25 

• Viewing the HAFM main window, page 28 

• Accessing the HAFM application, page 31 

• Monitoring the HAFM application, page 36 

• Group Management, page 39 

• Exporting and importing data, page 44 

• Backing up and restoring data, page 47 

Managing the appliance 

This section describes how to add, remove, log into, and log out of the HAFM appliance. 

Logging into HAFM 

You must log into an appliance to monitor a SAN. 



df NOTE: You must have an established login and password account on the HAFM appliance in 
order to log in. 



1. The HAFM Log In dialog box displays automatically when you open the application (see 

Figure 3). 



Connect to HAFM 8.6 server to open a SAN 
Network Address localhost| 



Server Name 

User ID gary 



Password 



O Forget password 
® Save password 



Selected a server 



Login Exit 



Figure 3 HAFM Log In dialog box 

The HAFM appliance address displays in the Network Address field. 
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2. You may specify a new address by typing it in the field, or selecting one from the drop-down 
list. 



|sf NOTE: Localhost is the default value. The application automatically determines the local IP 
address and uses that value as the local host address. 



3. The HAFM appliance name displays in the Server Name field. 

4. Enter your user ID and password. 

5. Select whether you want the application to remember your password the next time you log in. 

6. Click Login. 

Logging out of HAFM 

To log into a different HAFM appliance, you must first log out of the current appliance. 
1 . Select SAN > Log Out. 

You are logged out of the current appliance and the HAFM Log In dialog box displays (Figure 3). 
Refer to "Logging into HAFM" on page 25 for instructions on logging in to a new appliance. 

Adding an appliance 

1 . Select SAN > Log Out. 

The HAFM Log In dialog box displays (See "HAFM Log In dialog box" on page 25.) 

2. To add a new appliance, enter the appliance network address in the Network Address field. 

TIP: TIP: If the appliance and client are on the same machine, you can type localhost in the 
Network Address field. 



|?f NOTE: You must have an established login and password account on the new appliance. 



The appliance name displays in the Server Name field. 

3. Enter your user ID and password. 

4. Select whether you want the application to remember your password the next time you log in. 

5. Click Login. 

The application logs into the appliance located at the specified network address. 

Removing an appliance 

You can remove appliances from the list in the Log In dialog box. 

1. If you are logged into an appliance, select SAN > Log Out. If you do not have the 
application open, start the application. 

The HAFM Log In dialog box appears (Figure 3). 
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2. From the Network Address drop-down list, select the appliance you want to remove. 
The selected appliance IP address displays in the Network Address field. 



&f IMPORTANT: The appliance will be deleted without confirmation. 



3. Click Delete. 

4. Click OK. 
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Viewing the HAFM main window 

Figure 4 shows the View All display of the HAFM main window. There are nine panels in this view. 
You can customize your screen view to show only the information that you need (see "Creating a 
customized view" on page 70). 



Hf NOTE: Some panels may be hidden by default. To view all panels, select View > All Panels, 
or press F12. 
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Figure 4 View All ■ HAFM window 

HAFM main window panels 

This section describes each panel of the HAFM main window. 

Menu bar 

The menu bar (Figure 4 O) consists of pull-down menus that allow you to view information, and 
configure and manage the application. 
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Toolbar 

The toolbar (Figure 4 ©) provides buttons to perform various functions. Place your cursor on a 
toolbar button for information about the button function. 



[|f NOTE: Depending on your configuration, the buttons on your toolbar may differ from the 
example. 



View tab 

The View tab (Figure 4 ©) displays the Master Log, Physical Map (topology), and Product List. 
Change the default size of the display by placing the cursor on the divider until a double arrow 
displays. Click and drag the adjoining divider to resize the window. You can also show or hide an 
area by clicking the left or right arrow on the divider. 

Product list 

The Product List (Figure 4 0) shows an inventory of all discovered devices and ports. The Product 
List is a quick way to look up product and port information, including serial numbers and IP 
addresses. To display the Product List, select Product List from the View menu, or press F9. You can 
edit information in the Product List by double-clicking in a field marked with a green triangle. You 
can sort the Product List by clicking a column heading. See "Customizing the Product List" on 
page 73 for information about customizing the information displayed in the Product List. 

Physical/Topology map 

The Physical/Topology map (Figure 4 ©) shows devices and their connections and ports. A 
topology is a logical and/or physical arrangement of devices on a network. See "Creating a 
customized view" on page 70 for information about customizing the information displayed in the 
Physical/Topology map. 

Master log 

The Master log (Figure 4 ©) lists the events that occurred on the SAN. The default locations for the 
log files are: 

• <JrzstaI2_ffome>\Server\Universe_Home\Test Universe 
\_Working\EventStorageProvider\event . log 

* <J2istaIl_Ho7ne>\Server\Local_Root\EventStorageProvider\event . log 

Connection utilization legend 

The connection utilization legend (Figure 4 ©) shows the percentage of utilization on the trunks on 
the Physical Map. The color and length of the lines indicate the bandwidth utilization. 

Minimap 

The minimap (Figure 4 ©) provides a high level view of the entire SAN. You can use it to navigate 
to more detailed map views. This feature is especially useful if you have a large SAN. To quickly 
jump to a specific place on the Physical Map, click the corresponding area on the minimap. 
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Anchoring or floating the Minimap 

You can anchor or float the Minimap to customize your main window. 
Floating the Minimap 

To float the Minimap and view it in a separate window, click the Detach button in the upper 
right-hand corner of the Minimap. 

Anchoring the Minimap 

To return the Minimap to its original location on the main window, do one of the following: 

• Click Attach in the upper right-hand corner of the Minimap. 

• Click Close in the upper right-hand corner of the Minimap. 

• Click the logo in the upper left-hand corner of the Minimap and select Close (ALT + F4). 
Resizing the Minimap 

On an anchored Minimap, place the cursor on the left border of the Minimap until a 
double-pointed arrow displays. Click and drag the adjoining divider. 

On a floating Minimap, place the cursor on a border of the Minimap until a double-pointed arrow 
displays. Click and drag to change the window size. 

Status bar 

The status bar, (Figure 4 ©) provides status information about the SAN and the application. Place 
your cursor on a status bar icon to for information about the status displayed. The icons are: 

• Server Status— Displays local appliance status. 

• Connection Status— Displays the appliance-Client connection status. 

• Product Status— Displays the most degraded status of all devices in the SAN. For example, if all 
devices are operational except one (which is degraded), the Product Status will display as 
degraded. Click this button to open the Product State Log. Refer to "Determining the discovery 
state" on page 66 for more information. 

Fabric Status— Displays the state of the fabric that is least operational, based on ISL status. The 
possible states are: 

• operational 

• unknown 

• degraded 

• failed. 

Select a product or fabric from the Physical Map or Product List and click this button to open the 
related Fabric Log (only available for persisted fabrics). Refer to "Monitoring events" on 
page 89 for more information. 

• Attention Indicator— This icon displays when at least one HP product in the SAN has an 
attention indicator. Click the icon to open the Service Request dialog box, which lists all HP 
switches and directors that need attention. 

" Call Home Status— Displays if the Call Home service has been enabled. If Call Home has been 
enabled on all managed HP switches and on the management application, the icon will appear 
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as enabled. If Call Home is disabled on any one of the HP switches or on the management 
application, the icon will appear as disabled. Click the icon to open the Call Home Settings 
Summary dialog box, which lists whether the Call Home feature is enabled on the management 
application and on each managed HP switch or director. 

• Server Name— Displays the name of the appliance to which you are connected. 

• Client Count— Displays the number of clients. 

• User's Access Level— Displays the user ID of the logged in user. 



[§f NOTE: Depending on your configuration, the icons on your status bar may differ from the 
example. 



Toolbox 

The toolbox (Figure 4 O®) allows you to vary the window display, and generate Physical Map 
reports. Place your cursor on a toolbox icon for information about its function. 

Selecting a customized view of the main window 

See "Creating a customized view" on page 70 to specify which information you want to display 
on the main window. To select a customized view click the View tab and then select the view 
name from the menu. 

Accessing the HAFM application 

You can access the HAFM application two ways: 

• Log in from a local, browser-capable PC connected through an Ethernet LAN segment. 

• Log in remotely with an HAFM client application. 

Locally accessing the HAFM application 

You can log in to the HAFM application located on the appliance from a PC connected through an 
Ethernet LAN segment: 

1. At the PC, launch the browser application (Netscape Navigator or Internet Explorer). 

2. At the PC browser, enter the URL in the following format: 

ht tp : / / xxx . xxx . xxx . xxx : 5 8 0 0 

xxx . xxx . xxx . xxx is the default IP address or the IP address configured for the appliance 
during installation. 
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The VNC Authentication window opens (Figure 5). 




Figure 5 VNC Authentication window 

3. Enter the password and click OK. 

The Welcome to Windows dialog box opens (Figure 6). 

if NOTE: The default VNC viewer password is password. 



Disconnect I Options I Clipboard I Send Ctrl-Alt-Del I Refresh I 




Press Ctrl-Alt-Delete to begin. 

Ch l-Alt-Del rrelps Keep your password secure. Click Help for more inform^don. 

Help 



Figure 6 Welcome to Windows dialog box 

4. Click Send Ctrl-Alt-Del at the top of the window to log on to the HAFM appliance desktop. 
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The Log On to Windows dialog box opens (Figure 7). 



(jlf NOTE: Do not press Ctrl-Alt-Delete on your keyboard. This logs you on to the PC, instead of the 
HAFM appliance. 



Disconnect I Options I Clipboard I Send Ctrl-Alt-Del I Refresh I 



Log On to Windows 



Windows 2000 

Professional 



built on NT Technology 



User name: Administrator 
Password: [1 



OK Cancel Options >> 



Figure 7 Log On to Windows dialog box 

5. Enter the Windows 2000 user name and password and click OK. 
The Connect to HAFM dialog box opens (Figure 8). 



df NOTE: The default Windows 2000 user name is Administrator and the default password is 
password. The user name and password are case sensitive. 



Conned to H&FMti server to open a SAN 




Delete | 


Network Address 16.129.91.113 










Server Name HAFMSERVER_v8-1-0 




User ID Administrator 


l 


Password |******** 


l 


0 Forget password 






* Save password 








| Login | 


Exit | 


(p Server Available 



Figure 8 Connect to HAFM dialog box 



The default address that appears in the Network Address box is the address of the last 
appliance accessed. Click the Network Address drop-down arrow to view the network 
addresses of all HAFM appliances that were accessed from the computer you are logged in to. 

6. Enter the HAFM appliance IP address in the Network Address box. 

• If you want to connect to an HAFM appliance on the list, select the IP address. 

8 If you are logging in to the local HAFM appliance, the network address is localhost. 

• If you want to connect to an HAFM appliance that is not listed, manually enter the IP address. 
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Enter your user name and password in the User ID and Password boxes. 



NOTE: If user names have not been established, use the default user name Administrator and 
password password. HP recommends that you change the default password as soon as possible. 

To add or modify user names, passwords, and user rights, see "Managing users" on page 51 . 

8. If you want your computer to save the login information, select Save Password. 

9. Click Login. 

The HAFM window opens (Figure 9). 

The network address you entered remains in the Network Address list for future logins. If you fail to 
connect to the appliance, the HAFM window does not appear and the network address does not 
remain in the list. 
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Figure 9 HAFM window 

Remotely accessing the HAFM application 

Users at remote PCs can access the HAFM application and Element Managers loaded on the 
appliance if the following criteria are met: 

• The remote workstation meets minimum hardware and software requirements (see "Configuring 
remote workstations" on page 225). 

• The HAFM client application is running. If you need to install the HAFM client application, see 

"Configuring remote workstations" on page 225. 
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The remote system is configured to connect with the HAFM appliance over a TCP/IP network 
connection. 

• No more than seven other remote users are currently logged in to the HAFM application. 

Operators at remote workstations can manage and monitor all products controlled by the HAFM 
appliance. Each active connection between a remote workstation and an HAFM appliance and 
managed product is called a session. 

To access the HAFM appliance from a remote workstation, perform the following: 

1. If the HAFM application is not running or the Connect to HAFM dialog box is not displayed on 
your remote workstation, start the client application by following the appropriate procedure for 
your workstation's operating system (see Table 5): 

Table 5 Starting HAFM on a remote workstation 



Operating 
software 


Procedure 


Windows 2000 
Windows NT 
Windows XP 


a. Start the HAFM Client application using one of the 
following options: 

• Select Start > Programs > HP HAFM > 
HAFM x.x. 

• Double-click the HAFM x.x desktop icon. 

b. Enter the Network Address, User ID, and 
Password for the HAFM appliance you intend to 
access. 

c. Click the Login button. The HAFM client accesses 
the HAFM appliance, and the View All - HAFM 
window opens (Figure 9). 


HP-UX 
AIX 
Linux 
Solaris 


From the directory where you have saved the HAFM 
application (usually the home directory): 

a. Go to the location where you installed the 
application (the default is /usr). 

b. Start the appliance and client: . /hafm 

c. If you want to start the client only: ./Client 
or: 

Go to the bin directory in the location where you 
installed the application (the default is /opt/): 

cd / pa th/HAFM x.x/bin 

d. Start the appliance: . /HAFM_Mgr start 

e. Start the client: ./HAFM_Client 



2. Click OK to close the HAFM Server Users dialog box. 

3. Follow step 6 through step 9 in "Locally accessing the HAFM application" on page 31 . 
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Logging out of an appliance 

To log out of the appliance select SAN > Log Out from the HAFM menu bar. 

You are logged out of the current appliance and the Connect to HAFM dialog box opens 

(Figure 8). 

Monitoring the HAFM application 
Starting and stopping HAFM Services 

HAFM Services is the software application that provides services to the HAFM application. HAFM 
Services runs only on the HAFM appliance. 

Reviewers ■ please provide a clearer description of HAFM Services. What type of function/service 
does it provide? 

You can start or stop HAFM Services from the desktop: 
Select Start > Programs > HP HAFM. 

• Select Stop Services to stop all HAFM Services and HAFM appliance functions. 

• Select Start Services to start these services and functions. 

Viewing user sessions 

Monitoring clients is an important part of maintaining the SAN because more than one client can 
access an appliance at a time. You can view user sessions to determine which clients are logged in 
to the appliance. 

To display the Active Sessions dialog box: 

1. Select SAN > Active Sessions, from the HAFM menu bar. 
The Active Sessions dialog box opens (Figure 10). 



administrator Default Admin 



-.dminisiraior Default Admin 



jDescjtim_ 



16.129.91 .113 
-16.1 15.1 95.223 



Dec 31,200313:57:50 
Jan 12, 2004 12:24:14 



Figure 10 Active Sessions dialog box 

The Active Sessions dialog box shows information about the active users. If a user is logged in from 
more than one location, there is a separate entry for each session. 

Disconnecting users 

1. Select a user and click Disconnect User to disconnect the user from the appliance. 
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The appliance immediately shuts down the appliance-Client connection. The status bar on the 
Client displays that the appliance connection was lost. All products and connections on the 
Physical Map stay in the condition they were in when the session ended; they do not turn grey. 
The Client displays a message stating that a user disconnected the Client from the appliance. 

Hf NOTE: To prevent this user from reconnecting, remove the user account through the HAFM Server 
Users dialog box. Refer to "Removing a user account" on page 53 for instructions. 



Fibre Channel networks use World Wide Names to uniquely identify nodes and ports within 
nodes. For many devices, the 64-bit WWNs are fixed, and their assignment follows conventions 
established by the IEEE. For other devices, the WWNs may be set or modified by the user. World 
Wide Names are a special concern for SAN Manager because: 

* WWNs are used as the primary keys to identify network elements 

* Experience has been that an ill-formed WWN is evidence of a malfunctioning device. 

Proper operation with SAN Manager requires that WWNs be unique within the network and 
well-formed (they must be 64 bits in length and the first byte cannot be zero). 

Determining user groups 

An administrator can determine the groups to which a user belongs: 

1. Select SAN > Users from the HAFM menu bar. 
The Users dialog box opens (Figure 20 on page 52). 

2. Select a user from the Users table. 

3. Click Find. 

The groups to which the user belongs are highlighted in the Groups list. 

4. Click OK. 

Determining the discovery state 

Iff NOTE: The Product List panel may be hidden by default. To view the Product List, select View > 
Product List from the HAFM menu bar or press F9. 
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You can determine the discovery status of products by looking at the status column in the Product 
List. Table 6 shows the list of operational statuses and their equivalent discovery states. 

Table 6 Discovery state equivalent 



Operational status 


Discovery state 


Unknown 


Offline 


Operational 

Degraded 

Failed 


Online 



Grouping on the Physical Map 

To simplify the Physical Map, devices appear in groups (Figure 1 1 ). Groups appear with 
background shading and are labeled as a group. You can expand and collapse groups to easily 
view a large topology. 
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Figure 1 1 A group on the Physical Map 

[if NOTE: Zonable fabrics are true fabrics. Fabric groups are a set of connected devices that may 
or may not be fabric devices. 

Collapsing groups 

To collapse a single group on the Physical Map: 

• Double-click the icon at the top right corner of the group on the topology 

• Double-click in the group, but not on a device. 

• Right-click in a group, but not on a device, and select Collapse. 

To collapse all groups on the topology by one level, click the Collapse icon on the HAFM 
toolbox (jKj). 

Expanding groups 

To expand a group on the Physical Map: 

• Double-click the group icon. 

• Right-click the group icon and select Expand. 
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To expand all groups on the topology by one level, click the Expand icon on the HAFM 
toolbox 

Group Management 

Group Management lets you make changes related to the configuration and monitoring of switches 
and directors to multiple devices at the same time. You can: 

Install E/OS firmware on switches and directors. 
Initiate data collections on multiple switches. 

• Create group event logs. 

Selecting Action tab with Run Data Collection 

To access the Group Manager: 

1. Select the Configure menu. 

2. Select the Group Manager option. 

3. Select one of the options, to display a set of tabs in the dialog box that are needed to complete 
the action. 

Group Manager initially displays with the Select Action tab selected and with the following options 
available: 

• Run data collection 

• Install E/OS firmware 

• Create Group Event Log 
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Select Action 



Select Switches Select GfOUp Action 



Output Options 



Install c »"' r . firmware 
This installs firmware on a group of products 



Great? Group L;vert Loci 



(•> Run data collection 



Displays isrfcir-n^jtion that lets you confirm group membership and run data collection 



Figure 12 Select Group Action dialog box 

Select Run data collection and the following tabs display on the left side. The tabs correspond to 
the steps for the action. The options that cannot be selected initially, can be selected as previous 
tabs are completed. 

• Select Action 

• Select Switches 

• Output Options 

• Execution Options 

• Data Collection 

Selecting Action tab with Install E/OS selected 

The Install E/OS firmware option installs firmware on a group of products. Select Install E/OS 
firmware and the following tabs display on the left side: 

Select Action 
Select Switches 
Select Firmware 
Execution Options 
Install 
History 
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Selecting Action tab with Create Group Event Log selected 

Select Create Group Event Log and the following tabs display: 

• Select Action 

• Select Switches 

• Create Log 

Displaying Select Action tab 

Displays the Select Group Action options. 

• Run data collection 
Install E/OS firmware 

• Create Group Event Log 

See figure (Figure 1 2) 

Displaying Select Switches tab 

Displays all switches and directors that are discovered by the appliance and lets the user select any 
set of those products for use in the group manager. 
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Figure 13 Select Switches/Directors dialog box 

Select switches and directors in the Available Switches/Directors table and move them to the 
Selected Switches/Directors table or to remove them from the Selected list using the arrows. 
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Select the Use Group drop down field to select a group and the table is populated with the 
products in the group. To add a group, move a switch or director from the Available 
Switches/Directors table to the Selected Switches/Directors table. Select Save and type a group 
name and click OK. 

Displaying other tabs 

• Displaying Select Firmware: Lists all firmware that can be installed on any product in the 
selected products list. Use this tab to add, revise and delete firmware. 

• Displaying Output Options: Displays the Output File Options information where you can 
output all data collections files to a folder. You can also output to a single zipped file that 
includes all data collection files. 

• Displaying Execution Options: Displays Execution Options information. You can pause 
before executing the action on each product. 

• Displaying Run Data Collection: Displays Data Collection Options information that lets 
you confirm group membership and run data collection with the pause execution option 
selected. 

• Displaying Install: Displays the Install information which lets you confirm group membership 
and install firmware. 

• Displaying History: Displays firmware install history information. Select the product 
firmware install that you want to reverse. 

• Displaying Create Log: Confirms group membership and creates a log of that information. 

Group Log 

The Group log lets the user view and delete the event logs defined on the Group Management 
screen. To access this log: 

1. From the main menu, select Monitor > Logs > Group. 

The Group Log displays. 

Viewing detail on the Product List 

You can view different levels of information on the Product List. 
Viewing all details 

To display all information on the Product List: 

1. Click the View All tab on the HAFM window. 

2. Select Levels > All Levels. 

Viewing only products 

To display only products on the Product List: 

1. Click the View All tab on the HAFM window. 

2. Select Levels > Products Only. 
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Zooming in and out of the Physical Map 

You can zoom in or out of the Physical Map to view products and ports. 

Zooming in 

To zoom in on the Physical Map, use one of the following methods: 

1. Click the zoom-in icon ( ^ ) on the HAFM toolbox, 
or 

Select View > Zoom from the HAFM menu bar. 
The Zoom dialog box opens (Figure 14). 
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Figure 14 Zoom dialog box 

2. Select a zoom percentage. 

3. Click OK. 

Zooming out 

To zoom out of the Physical Map, use one of the following methods: 

1. Click the zoom-out icon (Q.1) on the toolbox, 
or 

Select View > Zoom from the HAFM menu bar. 
The Zoom dialog box opens (Figure 14). 

2. Select a zoom percentage. 

3. Click OK. 

Changing view options on the Physical Map 

To change the view of the Physical Map, select View > Show from the HAFM menu bar, and 
then select one of the available view options. 

Turning flyovers on or off 

Flyovers appear when you place the cursor on a product. They provide a quick way to view a 
product's properties. To turn flyovers on or off, select View > Enable Flyover Display from the 
HAFM menu bar, and then select On or Off. 
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Exporting and importing data 

The import and export features are important functions of the application. You can import and 
export data for many reasons, including to communicate issues to the support center and to capture 
network status. 



Hr NOTE: Currently, you can only export to and import from the same releases of the application (for 
example, export from release 8.0 and import to release 8.0). 



Importing a file imports the following: 

• Physical map 

• Status icons 

• User properties 

• Discovered properties as they were set at the time of the export 

Exporting data 

To export data to disk or e-mail, perform the following procedure: 
1. Select SAN > Export from the HAFM menu bar. 
The Export dialog box opens (Figure 15). 



EipOrt TO | D|S |; t|| 
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6 KB 
1 KB 

D KB . led Reports 




Figure 15 Export dialog box 

2. Select an option from the Export To list: 
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• Disk— Saves the exported files to the disk in 

<Tnsfca2I_Home>\Client\Data\sandate\san* . zip . 

• EMail— Mails the exported files as an e-mail attachment directly from the application. 
3. Select the types of files that you want to export from the Files check list. 

Depending on the export destination you selected in the previous step, some file types may not be 
available. 



[§f NOTE: Performance data is an optional feature. If you purchased this option, you can select the 
switches for data export (Figure 1 6). 
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Figure 16 Select Switches dialog box 



Hf NOTE: The Product List exports in tab-delimited format. To view the Product List in table format, 
open it in Microsoft® Excel. 



4. If you are exporting to disk, proceed to step 6. 

5. If you are exporting to e-mail, enter information in the following boxes: 

• Mail To 

• Mail List 

• From 

• Subject 

• Message 

6. Click OK. 
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A Confirmation message opens (Figure 17). 



I | ..it . .I I i .1 . e l.il 

The following 'riles were Greeted at' 
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sen0401 28021 455 zip 

[§lI 

Figure 17 Export Confirmation message 

7. Make a note of the file location and name and click OK. 

Importing data 

You can select to import the following information to the application: 

• SAN File (zip) — Imports an entire SAN in zip format. 

• Nicknames— Imports the nicknames that were assigned to HP switches using the HAFM 
appliance and displays them on the Physical Map and Product List as product labels. 
Nicknames must have been defined in the Node List View of a product Element Manager or by 
configuring nicknames in HAFM. Nicknames defined in the Configure Ports area of an Element 
Manager will not be imported. The WWNs in the nicknames file are assumed to be port 
WWNs. If this file uses the node WWN, no import will take place. The nicknames file is 
located in C:\EfcData\EmsData\efcHafmServices\WwnNicknames. 

• Properties (csv) —Imports properties of products and ports, including labels and IP addresses. 
The general format for this import is in comma-separated value (CSV) ASCII format. The first line 
defines the kind of import (Node or Port) and lists the properties and columns in the Product List. 
The first column must be either Node Name or Port Name. Subsequent columns contain 
property (column) names. These properties may be standard (for example, Label), or 
user-defined (for example, Cabinet Color). Non-editable properties will not be imported (for 
example, Port Count). Non-existent columns will be ignored. The format is space-sensitive (only 
commas are used as separators) so trim leading or trailing spaces unless you want to import 
them as part of the data. To import port properties, use the Port Name column header. Port 
import will only allow the Label property to be set. 

A CAUTION: Importing files clears the Master Log of previous events. 
To import files: 

1. Select SAN > Import from the HAFM menu bar. 
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The Import dialog box opens (Figure 1 8). 



Import From SAN File (zip) ■* , | 

File Name | | Browse.. | 

| OK | Cancel | Help | 

I 

Figure 18 Import dialog box 

2. Select the type of file you want to import from the Import From list. 

3. Enter the path and file name in the File Name box. 

Hf NOTE: The default path is <Install_Home>\ClientData\san<date>\san* . zip. 
Importing the rep* . zip file causes errors. 



4. Click OK. 

A confirmation message box opens. 

• If you selected SAN File, Nicknames, or Properties, continue with step 5. 

• If you selected Server HBA Mappings or Storage Port Mapping, go to step 6. 

5. If you are sure you want to replace the data on the appliance, click OK. 

If you are importing a SAN file or a properties file, the client is logged out and the Connect to 
HAFM dialog box opens. 

6. Log back into the application. 

Hf NOTE: When discovery is on, the discovered SAN is replaced with the imported data. For 
information about discovery, see "Configuring discovery" on page 59. 



Backing up and restoring data 

You can protect your SAN data by backing up the data and then restoring it when necessary. The 
HAFM appliance provides a platform for the Enhanced Base package of the HAFM application. 
This provides more memory for future product enhancements. 

The following data is backed up from the <Install_Home>\Call_Home, 
<Install_Home>\Server and <Install_Home>\Client directories: 

• All log files 

• Zoning library 

• Call Home configuration (including phone numbers and dialing options) 

• Configuration data 
Plans 

• License information 
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• User launch scripts 

• User-defined sounds 

• All data exported through the Export option on the SAN menu 



|?f NOTE: Firmware files are not backed up. 



Backing up data 

If you keep a read/writable (CD-RW) disk in the CD recorder drive of the appliance, critical data 
from the HAFM application is automatically backed up to the CD-RW disk when the data directory 
content changes or when you restart the HAFM application. 

Restoring data 

Allow 45 minutes after making a configuration change before restoring data from the backup files. 
This ensures that all your changes are included in the backed up files. It is possible that, in a 
disaster recovery situation, configuration changes made less than 45 minutes before appliance loss 
could be missing from the backup. 

To restore data to the appliance platforms, perform the following procedure: 

1. Reinstall the application, if necessary. 

2. On the HAFM appliance, open the HAFM application. 

3. Select SAN > Import from the HAFM menu bar. 
The Import dialog box opens, (Figure 1 8). 

4. Select SAN File (zip) from the Import From list. 

5. Click Browse. 

The Browse dialog box opens. 

6. Select the following file: 

<CD Drive>\Backup\Server\Data\Backup\BkpPersisted . zip. 

7. Click Open. 

8. Click OK on the Import dialog box. 

A message box opens stating that imported data replaces corresponding data on the 
appliance. 

9. If you are sure you want to replace the data on the appliance, click OK. 
The client is logged out and the Login dialog box opens. 

10. Log back into the application. 

1 1. Stop the HAFM appliance Services by selecting the Start > Programs > HAFM >Stop 
Services. 

A DOS window displays messages of services being shut down. 
12. To restore data to the HAFM appliance, complete the following: 

a. Copy the three folders (Call Home, Client, and Server) from the CD-ROM drive 

(X: \Backup\ directory) and paste them in C : \Program Files\< Install_Home>. 
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A message displays asking if you want to overwrite the existing files, 
b. Click Yes. 

13. Start HAFM Services by selecting the Start > Programs > HAFM > Start Services. 

14. Ensure discovery is turned on by selecting On from the Discover menu. 

15. Follow the instructions provided by the InstallShield wizard. 
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3 Managing the HAFM application 



This chapter provides instructions for managing and customizing the application. 

• Accessing HAFM, page 51 

• Managing users, page 51 

• Managing user groups, page 56 

• Discovering a SAN, page 59 

• Configuring the SNMP agent, page 67 

• Customizing the main window, page 69 

Accessing HAFM 

You can access HAFM two ways: 

• Log in from a browser-capable PC connected through an Ethernet LAN segment. 

• Log in remotely with an HAFM client application. 

See "Accessing HAFM" on page 51, for log in instructions. 

Adding and removing a network address 

When you log in to the appliance, the network address that you enter is added to the network 
address list on the Connect to HAFM dialog box. 

To remove a network address from the list in the Connect to HAFM dialog box: 

A CAUTION: This procedure deletes the appliance from the network address list without prompting 
you for a confirmation. 



1. Turn on the HAFM appliance, or if the appliance is already turned on, double-click the HAFM 
icon on the desktop. 

The Connect to HAFM dialog box opens (Figure 8). 

2. Select the appliance you want to remove from the network address list. 
The selected appliance's IP address appears in the network address box. 

3. Click Delete. 

Managing users 

To grant access to the HAFM application, the administrator can assign user names, passwords, 
and access rights. Access rights are defined by the user groups as described in "Managing user 
groups" on page 56. 
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Viewing the list of users 

Select SAN > Users from the HAFM menu bar to view a list of users, their event notification 
settings, their e-mail addresses, and a list of user groups to which they belong in the Users dialog 

box (Figure 1 9). 



Email Address 



Email 



Detauft Admin 



□ FN 



El .• Admin 
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Add 

Email Event Notification Setup... 



OK Cancel Help 



Figure 19 HAFM 8.6 Server Users dialog box 

Adding a user account 

To add a user account: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 1 9). 

2. Click Add. 

The Add User dialog box opens (Figure 20). 



Name 

Email Address 



Email [j Enable Filter 

User ID | 



Password 

Retype Password Q 



OK Cancel Help 



Figure 20 Add/Edit User dialog box 

3. Enter the user information in the following boxes: 

• Name 

• Email Address, separating multiple addresses with a semicolon 
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• User ID 

• Password 

• Retype Password 

4. Select the Enable check box to enable e-mail notification for the user. 

A message may appear stating that you must enable event notification for the SAN. Click Yes. 

5. Click the Filter link to specify the event types for which to send e-mail notifications to this user. 
See "Filtering event notifications for a user" on page 54 for details. 

6. Click OK. 

The new user appears in the Server Users dialog box. 

7. Click OK. 

Changing a user account 

To modify a user account: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 

2. Select the user whose information you want to edit. 

3. Click Edit. 

The Edit User dialog box opens (Figure 20 on page 52). 

4. Edit the information as necessary. 

5. Click OK. 

The edited information appears in the Users dialog box. 

6. Click OK. 

Removing a user account 

A CAUTION: This procedure removes the user's account without prompting you for confirmation. 

Use the following procedure to remove a user account: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 1 9 on page 52). 

2. Select the user account you want to remove. 

3. Click Remove. 

4. Click OK. 



[If NOTE: If the user is logged in when you remove the account, the account is not affected until the 
user logs out and attempts to log in again. 



HA-Fabric Manager user guide 53 



Filtering event notifications for a user 



The application provides notification of many different types of SAN events. If a user needs to 
know only about certain events, you can specify which event notifications are sent to that user. To 
filter event notification: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 

2. Click the Filter link in the Email column associated with the user for whom you want to filter 
events. 

The Filter dialog box opens (Figure 21). 

The Selected Events table includes the events of which this user is notified. The Available Events 
table includes all other events. 
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Figure 21 Filter dialog box 

3. Move events between the tables by selecting the event and clicking the appropriate arrow 
button. 

4. Click OK. 

The Users dialog box opens. 

Turn on event notification for the user by selecting the Filter check box. 
6. Click OK. 

Configuring remote management access 

You can specify the network addresses that can access the appliance: 
1. Select SAN > Remote Access from the HAFM menu bar. 
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The Remote Access dialog box opens (Figure 22). 



\^\ Allow remote management sessions 
Maximum number of remote sessions | 25 
Allow 

(•) [Any network address to connect] 

O Only network addresses below to connect 

O All network addresses EXCEPT those below to connect 




Figure 22 Remote Access dialog box 

2. Select the Allow remote management sessions check box to allow others to access the 
appliance remotely. 

3. Enter the maximum number of remote sessions you want to allow. 

4. Select whether to allow all or some network addresses to connect. 

5. If you select Only network addresses below to connect or All network addresses 
EXCEPT those below to connect, enter the appropriate addresses in the Network Address 
box. 

• To add an address, click Add, enter a network address, and click OK. 

• To remove an address, highlight the address in the table and click Remove. 

6. Click OK. 

Disconnecting a user 

To disconnect a user, an administrator can: 

1. Select SAN > Active Sessions at the HAFM menu bar. 
The Active Sessions dialog box opens. 

2. Select the user that you want to disconnect and click Disconnect User. 

A message box opens (Figure 23). 




Figure 23 Disconnect User message box 



HA-Fabric Manager user guide 55 



3. Click Yes. 

• The user is disconnected. 

• The appliance immediately shuts down the appliance-client connection. 

• The status bar on the client screen shows a message stating that the appliance connection 
was lost. 

• All products and connections on the Physical Map stay in the condition they were in when 
the session ended; they do not turn grey. 

• The client screen shows a message stating that a user disconnected the client from the 
appliance. 

[§f NOTE: To prevent this user from reconnecting, remove the user account. See "Removing a user 
account" on page 53. 



Managing user groups 

User groups are a security feature that define allowable access to information and system features. 
System administrators determine each user's needs and assign an appropriate user group. This 
section provides an overview of user groups and their access levels, and describes how to set up a 
user group. 

Understanding user groups and access levels 

Table 7 lists the four pre-configured user groups available with the application. A system 
administrator can create additional user groups to provide users access to specific features and 
views. Users can be assigned the following types of access to features: 

• Read/write access: The ability to view and edit information. 

• Read-only access: The ability to view information; edit and configuration capabilities are 
disabled. 

• No access: Access to information is denied. 
Table 7 User groups and access levels 



User group 


Description 


System 

Administrator 


Read/write access for all features; all functions are enabled 
and allowed. 


Maintenance 


Read/write access for Call Home event notification, device 
maintenance, and e-mail event notification setup. 

Read-only access for all other features. 


Operator 


Read/write access for device operation. 
Read-only access for all other features. 


Product 
Administrator 


Read/write access for device administration. 
Read-only access for all other features. 
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Creating a user group 

To create a user group and specify access to certain features and views in the application: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 1 9 on page 52). 

2. Click Add located below the Groups table. 
The HAFM Group dialog box opens (Figure 24). 
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Figure 24 HAFM Group dialog box 

3. Enter information for the new user group in the following boxes: 

• Name 

• Description 

4. If you want to assign permission to use only certain views, proceed to step 9. 
If you want to assign permission to use certain features, proceed to step 5. 

5. Select the features for which you want to provide read/write access in the features list. 

6. Click ►] next to the Read/Write list. 

The features are moved to the Read/Write list. 

7. Select the features for which you want to provide read-only access in the features list. 

8. Click J>J next to the Read Only list. 

The features are moved to the Read Only list. 

9. Click the Views tab. 

10. Select the views you want the user group to be permitted to access in the available views 
1 1. Click p> to move the selections to the Selected Views list. 
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12. Click OK. 

The new group appears in the Groups list of the Users dialog box. To add users to this group, 
follow the instructions in "Assigning users to groups" on page 58. 

13. Click OK. 

Changing a user group 

An administrator can change a user group's access to certain features and views. This provides 
added security for your SAN as well as your management application. To change a user group: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 

2. Select the user group to be changed. 

3. Click Edit, located below the Groups list. 

The HAFM Group dialog box opens (Figure 24). 

4. Select the features that you want to change, and click the appropriate arrow to move them to 
another list. 

5. Click OK. 

The Users dialog box opens. 

6. Click OK to accept the changes. 

Removing user groups 



A CAUTION: This procedure removes the user group without prompting you for a confirmation. 

An administrator can remove a user group regardless of whether any users are assigned to the 
group: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 1 9 on page 52). 

2. Select the group you want to remove from the Groups list. 

3. Click Remove located below the Groups list. 

4. Click OK. 

Assigning users to groups 

An administrator assigns users to groups to provide access to features and topology views. If an 
administrator assigns one user to multiple groups, the user has access rights specified in all the 
groups. 



Hf NOTE: If a user is logged in when you reassign the group, the account is not affected until the 
user logs out and logs in again. 
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To assign a user to an existing group, perform the following procedure: 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 

2. Select a user in the Users list. 

3. Select the groups to which you want to assign the user in the Groups list. 

4. Click _►]. 

The user is assigned to the selected groups. 

5. Click OK. 

Determining user groups 

An administrator can determine the groups to which a user belongs through the HAFM Users 
dialog box. 

1. Select SAN > Users from the HAFM menu bar. 

The HAFM 8.6 Server Users dialog box opens (Figure 19 on page 52). 

2. Select a user in the Users list. 

3. Click Find. 

The groups to which the user belongs are highlighted in the Groups list. 

4. Click OK. 

Discovering a SAN 

The application discovers products, fabrics, and connections in a SAN. Through discovery, you 
can manage and monitor your SAN in real time, ensuring that any issues are resolved 
immediately. This section provides instructions for configuring the discovery feature. 

Understanding how discovery works 

Discovery is the process by which the application contacts the devices in the SAN. The application 
illustrates each product and its connections on the Physical Map. After you log in and configure 
and turn on discovery, the application discovers products connected to the SAN. 

When performing out-of-band discovery, the application connects to the switches through the IP 
network, and product information is copied from the SNS database on the switch to the appliance. 

Only fabrics that have HP switches as the principal switch are displayed. If a HP switch is being 
directly managed, but exists in a fabric where the principal switch is a third-party device, another 
appliance is not allowed to connect to and manage that device. 



NOTE: Ensure that your SNMP communication parameters are set correctly in order to discover 
switches. Otherwise, the discovery may fail. 



Configuring discovery 

To define the devices you want discovery to find: 
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1. Select Discover > Setup from the HAFM menu bar. 
The Discover Setup dialog box opens (Figure 25). 
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Figure 25 Discover Setup dialog box 



|?f NOTE: To discover all SAN products, you must specify each product's IP address in the Discover 
Setup dialog box (Out-of-Band tab). If you do not configure the application to discover the devices 
directly, the connections and attached devices may not appear correctly. 



2. Select IP addresses from the Available Addresses list and add them to the Selected Individual 
Addresses list by clicking the right arrow ( f> ) button. 

3. Click OK. 

4. Click Add to specify the IP addresses you want to discover through out-of-band discovery. 

You can add, change, and remove IP addresses as necessary. Refer to "Configuring IP 
addresses and community strings" on page 63 for instructions. 

5. Select the Selected Individual Addresses table entries that you do not want to discover now, 
and move them back to the Available Addresses table by clicking the corresponding left arrow 
button. 

6. Click OK. 

7. Turn discovery on or off by selecting On or Off from the Discover menu. 

ubleshooting discovery 

If you encounter discovery problems, complete the following checklist to ensure that discovery was 
set up correctly: 

1. Verify IP connectivity by pinging the switch. 

a. Open the command prompt. 

b. From the HAFM Appliance, type ping <switch IP address>. 
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Verify the SNMP settings. 

a. Launch Embedded Web Server (EWS) by opening a web browser application and entering 
the IP address of the product as the Internet uniform resource locator (URL). 

For example, http://1 0.1 .1 .1 1 . 

b. Log in and click OK. 

c. Select Configure from the navigation panel. 

d. Select the Management tab. 

The Management and SNMP tab views display. 
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Figure 26 SNMP tab 

e. Verify that the Enable SNMP Agent option is selected. 

f. Verify that the Community Name field displays "public", or matches the HAFM appliance 
configuration. 

3. Verify the product data. 

a. Select View from the navigation panel. 

b. Select the Unit Properties tab. 
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The Unit Properties tab view displays showing product properties. 
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Figure 27 The Unit Properties tab 

c. Verify that the type number is one of the following: 
003016 

003032 
003216 
003232 
004300 
004500 
005000 
006064 
006140 

d. Verify that the World Wide Name has the correct syntax (xx : xx : xx : xx : xx : xx : xx : xx) 
4. Verify SNMP connectivity. 

a. Use a third-party MIB browser to verify the SNMP connection. 

b. Change SNMP default timeout. 



62 Managing the HAFM application 



5. Stop the HAFM appliance Services by selecting the Start > Programs > HAFM > Stop 
Services. 

A DOS window displays messages of services being shut down. 

6. Increase the default SNMP settings. If the device is running heavy traffic or is known to have 
slow SNMP response time, moderately increase the SNMP timeout (default timeout is one 
second) and retry count (default count is one retry). 

These two values are controlled by two VMParameters residing in the 
bin\HAFMService . ini file when the application is running as a Windows service: 
smp.snmp. timeout and smp.snmp. retries. For example, specifying 

"-Dsmp . snmp . timeout=5" and "-Dsmp . snmp . retries = l" instructs the server to use five 
seconds as the SNMP timeout and one retry as the retry count. 



Hf NOTE: The higher the values, the longer discovery will spend waiting for a SNMP response. This 
translates into slower system performance. 



8. Start HAFM Services by selecting the Start > Programs > HAFM > Start Services. 

Configuring IP addresses and community strings 

You can alter the database of selected IP addresses, SNMP community strings, Product type, and 
Access that the application uses to perform discovery, communication functions, and password 
authentication. 

Adding an IP address 

To add IP addresses and subnets through which the SAN can be discovered, perform the following 
procedure: 

1. Select Discover > Setup from the HAFM menu bar. 
The Discover Setup dialog box opens (Figure 25). 

2. Click Add. 

The Domain Information dialog box opens (Figure 28). 

3. Click the IP Address tab. 



IP Address j $ mP | product Type and Access 
Description | ~\ 
IP Address | | | 
Subnet Mask | 255.255.24S.D 
Add Multiple 

Generate s sequence of IP addresses 

Use the IP abo ve as the first address 

Last IP | 



| QK | Cancel | Help | 

Figure 28 Address Properties dialog box (IP Address tab) 

4. Enter the appropriate information for the product to be added in the following boxes: 
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• Description 

• IP Address 

• Subnet Mask associated with the IP address 

5. If you want to generate a sequence of IP addresses: 

• Select the Generate a sequence of IP addresses check box. 

• Enter the last IP address in the Last IP box. 



Hf NOTE: All IP addresses in a sequence must be on the same subnet and have the same first three 
octets. 



6. Click OK. 
Changing an IP address 

To edit IP addresses or associated subnets that are listed on the Discover Setup dialog box: 

1. Select Discover > Setup from the HAFM menu bar. 

The Discover Setup dialog box opens (Figure 25 on page 60). 

2. Select the IP address you want to change from the Available Addresses list. 

3. Click Edit. 

The Address Properties dialog box opens (Figure 28). 

4. Edit the information as necessary. 

5. Click OK. 

6. Click OK to close the Discover Setup dialog box. 
Removing an IP address 

To remove IP addresses from the Discover Setup dialog box: 

A CAUTION: This procedure removes the IP addresses without prompting you for a confirmation. 



1. Select Discover > Setup from the HAFM menu bar. 

The Discover Setup dialog box opens (Figure 25 on page 60). 

2. Select the IP address that you want to remove from the Available Addresses list. 

3. Click Remove. 

4. Click OK to close the Discover Setup dialog box. 
Configuring a community string 

The community string defines read/write accessibility to devices. By default, the public community 
has read-only privileges, and the private community has read/write privileges. However, you can 
customize the community string. To specify community strings used to communicate with products, 
perform the following procedure: 
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1. Select Discover > Setup from the HAFM menu bar. 

The Discover Setup dialog box opens (Figure 25 on page 60). 

2. Select the IP address that you want to change from the Available Addresses list. 

3. Click Add. 

The Address Properties dialog box opens (Figure 28 on page 63). 

4. Click the SNMP tab. 

The Community Strings tab opens (Figure 29). 

IP Address ! SNMP ; product Type end Access | 

Set the SNMP community strings used to communicate with devices 

Fr ■■! • C ri i ■■ 

O Custom | | Confirm Custom | | 

Write Defaut 'private 1 

O Custom | | Confirm Custom: 



| QK | Cancel | Help | 

Figure 29 Address Properties dialog box (Community Strings tab) 

5. Select an option in the Read box. 

• Select Default 'public' to select the default string. 

• Select Custom to specify a custom string. 

6. Select an option in the Write box. 

• Select Default 'private' to select the default string. 

• Select Custom to specify a custom string. 

7. If you selected Custom in step 5 or step 6, continue to step 8. Otherwise, proceed to step 1 0. 

8. Enter the custom string in the Custom box. 

9. Enter the string again in the Confirm Custom box. 

10. CIick OK. 

1 1 .Click OK to close the Discover Setup dialog box. 
Reverting to a default community string 

To set the community string with default values: 

1. Select Discover > Setup from the HAFM menu bar. 

The Discover Setup dialog box opens (Figure 25 on page 60). 

2. Select an IP address from the Available Addresses list. 

3. Click Add. 

The Available Addresses dialog box opens (Figure 28 on page 63). 

4. Click the SNMP tab. 

The SNMP tab opens (Figure 29 on page 65). 
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5. Click Default 'public' and Default 'private'. 

6. Click OK. 

Turning discovery on and off 

To turn discovery on and off, select Discover > On | Off from the HAFM menu bar. 

Determining the discovery state 

|?f NOTE: The Product List panel may be hidden by default. To view the Product List, select View > 
Product List from the HAFM menu bar or press F9. 

You can determine the discovery status of products by looking at the Status column in the Product 
List. Table 8 shows the list of operational statuses and their equivalent discovery states. 

Table 8 Discovery state equivalent 



Operational status 


Discovery state 


Unknown 


Offline 


Operational 

Degraded 

Failed 


Online 



Configuring the Product Type and Access 

You can specify the product type and set a user name and password for the address. 



Ilf NOTE: The Product Type and Access tab may not be available in all situations. 



1. Select Discover > Setup. 

The Discover Setup dialog box (Figure 25) displays. 

2. Click Add. 

The Address Properties dialog box displays. 
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3. On the Address Properties dialog box, click the Product Type and Access tab. 



MkGss Properties i 



IP Address | SNMP Product Type and Access | 
Product Type Switch ^ 

User ID | 
Password | 
Retype Password | 



OK Cancel Help 



Figure 30 Address Properties dialog box (Product Type and Access tab) 

4. Select the type of device from the Product Type drop-down list. 

5. If you select <not specified> from the Device Type drop-down list, go to step 1 6. 

6. If you select Switch from the Device Type drop-down list, go to step 14. 

7. Enter a user ID in the User ID field. 

8. In the Password and Retype Password fields, enter the password. 

9. Click OK. 

Configuring the SNMP agent 

This section provides information to help you use the simple network management protocol (SNMP) 
agent module. 

Setting up the SNMP agent 

The SNMP agent module implements the objects defined in the Fibre Channel Management 
(FCMGMT) Management Information Base (MIB) 3.1 and a small number of objects defined in 
MIBII. Through implementation of these MIB objects, the agent translates information stored on the 
appliance into a form usable by SNMP management stations. 

You can configure network addresses and community names for up to 12 SNMP trap recipients. 
SNMP sends messages for specific events that occur on the appliance to trap recipients. 
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Figure 31 shows the dialog box used to configure the SNMP agent. 



Community Strings Trap Recipients | 
v Enable Authorization Traps 
Ti sp Recipierrts 



Active | IP Address |UDP 



Acid. 



Cancel Help 



Figure 31 SNMP Agent Setup dialog box 

Turning the SNMP agent on or off 

To turn the SNMP agent on or off, select Monitor > SNMP Agent > On | Off from the HAFM 
menu bar. 

Configuring trap recipients 

To configure the SNMP agent that runs on the appliance and implements the Fibre Alliance MIB, 
perform the following: 

1. Select Monitor > SNMP Agent > Setup from the HAFM menu bar. 
The SNMP Agent Setup dialog box opens (Figure 31). 

2. Click the Trap Recipients tab. 

3. Select Enable Authorization Traps if you want to enable messages to be sent when 
unauthorized management stations try to access SNMP information through the appliance. 

4. Click Add. 

The Add Trap Recipient dialog box opens (Figure 32). 



Ti ap Recipient 0 



IP Address 



UDP Port [ leJ 



Community String public 




Figure 32 Add Trap Recipient dialog box 

5. If you want this trap recipient to be active, select the Activate check box. 

6. Enter the IP address or DNS host name of the trap recipient in the IP Address box. 



This name must be 64 characters or fewer. 
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7. Enter the User Datagram Protocol (UDP) port number in the Port box. This overrides the default 
UDP port number for a trap recipient with any legal, decimal UDP number. 

8. Select a community string from the Community String list. 

9. Click OK. 

Editing trap recipients 

To edit an existing trap recipient: 

1. Select Monitor > SNMP Agent > Setup from the HAFM menu bar. 
The SNMP Agent Setup dialog box opens (Figure 31 on page 68). 

2. Click the Trap Recipients tab. 

3. Select the IP address of the trap recipient that you want to edit. 

4. Click Edit. 

The Edit Trap Recipient dialog box opens (Figure 33). 

Trap Recipient |^j Activate 

IP Address 1 92.5 2.22.2 | 

UDP Port | 162 

Community String jpublic T | 



Figure 33 Edit Trap Recipient dialog box 

5. Edit the information as necessary. 

6. Click OK. 

Removing trap recipients 

To remove an existing trap recipient from the list: 

A CAUTION: This procedure removes trap recipients without prompting you for confirmation. 

1. Select Monitor > SNMP Agent > Setup from the HAFM menu bar. 
The SNMP Agent Setup dialog box opens (Figure 31 on page 68). 

2. Click the Trap Recipients tab. 

3. Highlight the trap recipient that you want to remove. 

4. Click Remove. 

5. Click OK. 

Customizing the main window 

You can customize the main window by adjusting the level of detail displayed on the Physical Map 
or Product List columns. This helps to simplify management of large SANs. This section provides 
instructions for customizing the topology layout and creating user-defined views of the SAN. 
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You can create views that show only certain fabrics. If you discover or import a SAN with more 
than 2000 devices, the devices appear on the Product List, but do not appear on the Physical Map. 
Instead, the topology area shows a message stating that the topology cannot be displayed. You 
can create a new view to filter the number of devices being discovered. 

Creating a customized view 

To customize the main window, perform the following procedure: 

|?f NOTE: Customized view settings reside on the appliance; all users who log on to the same 
appliance are able to select that view. 

1. Perform one of the following to open the Create View dialog box: 

• Select View > Create View from the HAFM menu bar. 

• Click the View tab and select Create View. 

The Create View dialog box with the View Members tab opens (Figure 34). 



Description 



View Members | Columns 
Include Assets via • All Selection 



| CK | Cancel ; 

Figure 34 Create View dialog box (View Members tab) 

2. Enter information in the following boxes. 

• Name 

• Description 

All fabrics appear on the map. 

3. If you want to filter the fabrics that appear on the Physical Map, continue to step 4; otherwise 
proceed to step 7. 

4. Select the Include Assets via Selection option. 
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The Create View dialog box displays (Figure 35). 



J Description [ 



View Members Columns 



Include Assets vie All ■ Selection 
I- ibrics 

# of Products Name 




Figure 35 Create View dialog box (Include Assets via Selection option) 

5. Select the fabrics you want to include from the Available Fabrics list. 

if NOTE: Other in the Available Fabrics or Selected Fabrics lists refers to all isolated devices and 
connected sets. You see all newly discovered devices in the category even if the devices were not 
originally part of the view. Select Other to display all isolated devices. 

6. Click to move your selections to the Selected Fabrics list. 

7. If you want to show or hide Product List columns, continue to step 8; otherwise proceed to 

step 1 2. 

8. Click the Columns tab. 

The Create View dialog box with the Columns tab opens (Figure 36). 



HE 



Description 



View Members Columns | 



Available Product Li si Columns 



Selected Product List Columns 
Label J Type 




OK Cancel Help 



Figure 36 Create View dialog box (Columns tab) 
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9. Select the columns you want to see in the Product List from the Available Product List Columns 
list. 

10. Click to move your selections to the Selected Product List Columns list. 

11. To add, edit, or remove columns, see "Customizing the Product List" on page 73. 

12. Click OK. 

The new view appears. 



|?f NOTE: If you select a customized view, any newly discovered devices appear in the list. 



iting a customized view 

To edit a customized view: 

1. Select View > Edit View from the HAFM menu bar. 
The Edit View dialog box opens (Figure 37). 

2. Select the view you want to edit. 



Description Test 



View Members Columns 






Include Assets via All Selection 






Available Fabrics 


Selected Fabrics 




Nickname \# of Products Name 




Nickname ( # of Products Name 










i 1000080088AOA28D 










6 1 000080088A0406F 








±J 
4 






Total Products 




Total Products 7 



Figure 37 Edit View dialog box 

3. If you select Include Assets via All after you first selected Include Assets via Selection 

you receive a message (see Figure 38). 



You will lose Selection view members settings. 
Do you want to continue? 



Figure 38 HAFM 8.6 Message 

4. Click Yes. 

5. Edit the information as necessary. 
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6. Click OK. 

Deleting a customized view 

To delete a customized view: 

1. Select View > Delete View from the HAFM menu bar. 

2. Select the view you want to delete. 

3. Click OK. 

Selecting a customized view 

To select a customized view click the View tab and select the view name from the list. 

Customizing the Product List 

You can customize the Product List by creating views that display certain fabrics or certain levels of 
detail on the Product List. 

Adding a column to the Product List 

You can define new Product List columns. This enables you to further customize the Product List to 
display pertinent device and port information. To add a column to a new or existing view: 

1. Perform one of the following to select a new or existing view: 

• Select View > Create View from the HAFM menu bar. 
The Create View dialog box opens (Figure 34 on page 70). 

• Select View > Edit View at the HAFM menu bar, and select the view you want to edit. 
The Edit View dialog box opens (Figure 37 on page 72). 

2. Click the Columns tab. 

The Create View dialog box with the Columns tab opens (Figure 36 on page 71). 

3. Click Add. 

The Create Column dialog box opens (Figure 39). 

Label | | | ] 

Description | ~ 
Type Product ~ | 

fcon & •*• | 

| OK | Cancel Help | 

Figure 39 Create Column dialog box 

4. Enter information for the new column in the following boxes. 

• Label 

• Description 

5. Select whether the column shows information about products or ports from the Type list. 

6. Select an icon to display in the column from the Icon list. 

7. Click OK. 
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8. Select a column from the Available Product List Columns list and click p> to display the new 
column in the Product List. 

The column name moves to the Selected Product List Columns list. 

9. Click OK. 

The new column appears in the Product List. 

Changing a column on the Product List 

To edit labels, definitions, information, and icons of existing Product List columns: 

1. Select View > Edit View from the HAFM menu bar. 

2. Select the view you want to edit. 

The Edit View dialog box opens (Figure 37 on page 72). 

3. Click the Columns tab. 

The Create View dialog box opens (Figure 36 on page 71 ). 

4. Click Change. 

The Edit Column dialog box opens (Figure 40). 

Label | | 

Description | ~ 
Type Product ^ | 

| OK | Cancel Help | 

Figure 40 Edit Column dialog box 

5. Edit the column properties as necessary. 

6. Click OK. 

Removing a column from the Product List 



A CAUTION: This procedure removes a column from the Product List without prompting you for a 
confirmation. 



To remove unused Product List columns in a customized view: 

1. Select View > Edit View from the HAFM menu bar. 

2. Select the view you want to edit. 

The Edit View dialog box opens (Figure 37 on page 72). 

3. Click the Columns tab. 

The Create View dialog box opens (Figure 36 on page 71 ). 

4. Ensure the column you want to remove is listed in the Available Columns list. To move a column 
to the Available Columns list, select it in the Selected Columns list and click <] . 

5. Select the column you want to remove from the Available Columns list. 
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6. Click Remove. 
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4 Configuring SAN products and fabrics 



This chapter provides instructions for configuring products, fabrics, and trap forwarding. 

• Managing SAN products, page 77 

• Configuring Enterprise Fabric Mode, page 82 

• Configuring fabric binding, page 83 

• Persisting and unpersisting fabrics, page 84 

• Configuring trap forwarding, page 87 

Managing SAN products 

Use the HAFM application to manage discovered products. 
This section describes the following topics: 

• Using the Element Manager, page 77 

• Searching for products in a SAN, page 78 

• Changing product properties, page 78 

• Determining product status, page 79 

• Displaying service requests, page 79 

• Displaying routes between ports, page 79 

• Displaying fabric properties, page 81 

Using the Element Manager 

You can use the Element Manager to manage switches and directors directly from the HAFM 
application. 



df NOTE: Use only one copy of the application to monitor and manage the same devices in a subnet. 
Opening multiple copies of the application could result in errors. 

Opening the Element Manager from the user interface 

Use the Element Manager to search for a product, change product properties, and perform other 
configuration and maintenance tasks. 

There are two ways to open the Element Manager from the HAFM user interface: 

• Right-click a product icon and select Element Manager. 

• Double-click a product icon. 

Opening the Element Manager from the command line 

The HAFM application contains a script that opens an Element Manager. To use the script: 
1. Ensure that the HAFM appliance is running and the product is discovered. 
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2. Use a text editor to open the following script: 

<JnstalI_Home>\bin\HAFM_ElementMgr .bat. 

3. Under the heading, rem HAFM Element Manager, find the line that begins: 

. . . ElementManagerStandAlone -s Server Ip -p Productlp -u UserName -pw 
Password 

4. Enter the appropriate values for the following parameters: 

• Serverlp 

• Productlp 

• UserName 

• Password 
Example: 

...ElementManagerStandAlone -s 172.16.9.10 -p 172.16.9.211 -u Administrator 
-pw password 

5. Save and close the file. 

6. Run the script by double-clicking the file or entering the script name at a DOS prompt. 

Searching for products in a SAN 

You can search for a product in a SAN by entering a parameter in the search box on the toolbar. 

1. Enter the search parameter (for example, an IP address) in the Search box on the HAFM toolbar. 

2. Click the up or down arrow to search through the Physical Map. 

3. Click Search to find each product. 

@f NOTE: When the application finds a product, it highlights the product on the Physical Map as well 
as on the Product List. 



Changing product properties 

You can change some of the properties of products that are online. This process does not change 
the product configuration. 

To change product properties: 

1. Right-click a product icon and select Properties. 
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The Properties dialog box appears (Figure 41 ). 
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Nickname 






Name 


DracoLab-34 




Node Name 


1 00008008860: 




Port Count 


24 




IP Address 






Domain ID 


t 




Managed By 


HAFMSERVER 




Firmware 


07.00.00 




Location 


DracoLab 




Contact 





Figure 41 Properties dialog box 
Hf NOTE: The product you select must be online for you to edit this information. 

2. Edit the product properties as appropriate. 

3. Click OK. 

Determining product status 

Determine product status by looking at the status icons on the Physical Map or the Product List. 
Table 9 describes the status icons. 



Table 9 Product status icons 



Icon 


Status 


No icon 


Operational 


A 


Degraded 




Failed 




Unknown/Offline 



Displaying service requests 

To display a list of all products requiring attention, click the Attention Indicator icon ( ) on the 
Status bar. The Service Request dialog box shows the names and IP addresses of all devices 
needing attention. Click a product name to jump to the product on the Physical Map. This list 
updates dynamically. 

Displaying routes between ports 

You can view the path that Fibre Channel frames must take between two ports in a multiswitch 
fabric. No more than one route shows at a time within the same fabric. If you attempt to show a 
different route within the same fabric, the previous route fades. 
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Before you display the route between two ports, ensure that: 

• All switches or directors in the route are managed by the HAFM application and attached to the 
same appliance. 

• All switches or directors in the route are attached to the same appliance. 

• All switches or directors in the route are Director 2/64, Director 2/140, Edge Switch 2/32, 
Edge Switch 2/16, or Edge Switch 2/24 models and are running firmware 1 .3 or higher. 

• All attached products in the route are in the same zone. 
To show the route for two ports: 

1. In the Product List, click the plus (+) symbol next to the switch product icon you want to expand. 

2. Right-click a node and select Show Route. 
The Show Route dialog box appears (Figure 42). 

Select a destination port and OK to display route 
Source Port |Qlogic - 21 01 OOE08B2905A3 



Destination Port 


Product JPort 


Nickname |lP Address 




□ QMCDATA-100008QQ8BAQE010 


ES3032 172.31.1.4 




Qlogic - 21 OOOOE08B0905A3 


210000E08B... 




Q MCDATA - 1000080088AOSC05 


ES-3D32 172.31 1 .36 





OK Cancel Help 



Figure 42 Show Route dialog box 

3. Select a destination port from the Destination Port list. 

4. Click OK. 

The route between the ports appears (Figure 43). 




Figure 43 Displaying routes between ports 
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Hiding routes 

You can hide routes between two ports in a multiswitch fabric. 
To hide the route: 

1. Display the route that you want to hide. 

See "Displaying routes between ports" on page 79. 

2. Right-click the route and select Hide Route. 

Displaying properties of routes 

To display the properties of a route: 

1. Display the route that you want to hide. 

See "Displaying routes between ports" on page 79. 

2. Right-click the route and select Properties. 

The Route Properties dialog box appears (Figure 44). 
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Figure 44 Route Properties dialog box 

Displaying fabric properties 

To display and change a fabric's properties: 

1. Right-click a fabric icon or the background of an expanded fabric and select Properties. 
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The Fabric Properties dialog box appears (Figure 45). 



Nickrigme 

Principal Switch 1 000080088A0406F 
FabricBincling Disabled 
FabricStatus |5 

I OK I Cancel I Help 



Figure 45 Fabric Properties dialog box 

The nickname is the only fabric property that can be changed. Assigning a nickname to a fabric is 
optional. However you cannot revert to having no nickname after one has been assigned. You can 
change the nickname if you choose, but you cannot leave the Nickname box blank after assigning 
a nickname. 

nfiguring Enterprise Fabric Mode 

Enterprise Fabric Mode option automatically enables features and operating parameters in 
multiswitch enterprise fabric environments. Enabling Enterprise Fabric Mode forces each switch in 
the fabric to enforce the following security-related features: 

Fabric binding— Allows or prohibits switches from merging with a selected fabric. 

• Switch binding— Allows or prohibits switches from connecting to switch E_Ports and F_Ports. 

• Rerouting delay— Ensures that frames are delivered through the fabric in order to their 
destination, even if a shorter, new path is created. Frames sent over the new, shorter path are 
delayed to arrive after older frames still in route over the older path. 

• Domain register state change notifications (RSCNs)— Indicates a switch entered or left 
the fabric. Notifications occur fabric-wide and do not have zoning constraints. 

• Insistent domain ID— Sets the domain ID as the active domain identification when the fabric 
initializes. If insistent domain ID is enabled, the switch isolates itself from the fabric if the 
preferred domain ID is not the switch's domain ID. 

bling and disabling Enterprise Fabric Mode 

To enable or disable Enterprise Fabric Mode for a fabric: 

1. Select Configure > Enterprise Fabric Mode from the HAFM menu bar. 
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The Enterprise Fabric Mode dialog box appears (Figure 46). 



-Please Note 

Enterprise Fabric Mode activates Fabric Binding, Switch Binding, Insistent 
Domain id, Rerouting Delay, end Domain rscns. 

Once activated, deactivating Enterprise Fabric Mode will NOT disable these 
features. Each fssit^re may need to be disabled separately. 



Fabric Name i 00008008620805? ^| 

Enterprise Fabric Mode jlJnknown 

^ActivateJ ^jtaciivde^ ^mmJ 

[Fabric is net Jaeirtg managed | 

Figure 46 Enterprise Fabric Mode dialog box 

2. Select the fabric for which you want to configure Enterprise Fabric Mode from the Fabric Name 
list. 

The fabric's current status shows in the Enterprise Fabric Mode box. 

3. To enable Enterprise Fabric Mode on the selected fabric, click Activate. 

To disable Enterprise Fabric Mode on the selected fabric, click Deactivate. 
If NOTE: You must be managing the fabric in order to disable Enterprise Fabric Mode. 



Configuring fabric binding 

Fabric binding enables you to configure whether switches can merge with a selected fabric. This 
provides security from accidental fabric merges and potential fabric disruption. 

Fabric binding requires the installation of a security feature called SANtegrity. See "SANtegrity 
features" on page 1 02 for details. 



Hf NOTE: You cannot disable fabric binding if Enterprise Fabric Mode is enabled. 



Enabling fabric binding 

You enable fabric binding using the Fabric Binding dialog box. After you enable fabric binding, use 
the Membership List to add switches that you want to allow in the fabric. 

1. Select Configure > Fabric Binding from the HAFM menu bar. 
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The Fabric Binding dialog box appears (Figure 47). 
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Figure 47 Fabric Binding dialog box 

2. Select the Enable/Disable check box for the fabric for which you want to configure fabric 
binding. 

3. Click OK. 

Adding and removing switches 

With fabric binding enabled, you can add or remove switches from the membership list. 

• To add switches to the selected fabric's membership list, select the switches from the Available 
Switches list in the Fabric Binding dialog box, and click |^ to move the switches to the 
membership list. 

• To add a switch that does not have physical connection to the fabric: 

a. Click Add Detached Switch. 

b. Enter the appropriate information in the following boxes: 

• Domain ID 

• Node WWN 

c. Click OK. 

• To remove switches from the selected fabric's membership list, select the switches from the 
Membership List in the Fabric Binding dialog box. Click 4 to move the switches to the Available 
Switches list. 



Persisting and unpersisting fabrics 



When you persist a fabric, you take a snapshot of the fabric's products and connections. This serves 
as a reference point for future comparisons. You can export the persisted fabric information for 
future reference. See "Exporting data" on page 44. 
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[if NOTE: Each fabric has an HP principal switch to manage the devices in fabric. If the principal 
switch changes, the new fabric must be manually persisted. 



Persisting a fabric 

To persist a fabric from the HAFM main window, do one of the following: 

• Select a fabric in the Physical Map or Product List, and then select Configure > Persist 
Fabric from the menu bar. 

• Right-click the fabric in the Physical Map or Product List, and then select Persist Fabric. 

• Highlight a fabric in the Physical Map or Product List, and then click the Persist Fabric icon on 



• Highlight a fabric in the Physical Map or Product List, and then select Configure > Unpersist 
Fabric from the menu bar. 

• Right-click the fabric in the Physical Map or Product List, and then select Unpersist Fabric. 

A confirmation box appears; click OK. 



You can unpersist a product that is no longer part of a persisted fabric. Doing so removes all 
connections associated with that product and updates the persisted fabric's data. 

To unpersist a product, from the HAFM main window: 

1. Right-click the product in the Physical Map or Product List, and then select Unpersist Fabric. 

A confirmation box appears. 

2. Click OK. 

Interpreting status 

There are various ways to determine the status of persisted fabrics and products. Real-time changes 
to the fabric appear on the Physical Map and the Product List and are listed in the fabric log. 

Persisted fabric status 

The green circle indicator on the fabric icon on the Physical Map and in the Product List shows the 
fabric is persisted (Figure 48 shows an example). 



the toolbar. 



Unpersisting a fabric 



To unpersist a fabric from the HAFM window, do one of the following: 





1 000080088 
602088 



Figure 48 Persisted fabric icon on Physical Map 
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The Fabric Log lists changes to the persisted fabric. For details about the fabric log, see 
"Monitoring events" on page 89. 

Product status 

When you add a product to a persisted fabric, is appears with a plus [+) icon (Figure 49). 



Figure 49 Product added to persisted fabric 

When you remove a product from a persisted fabric, it appears as a ghost image with a minus ( - ) 
icon (Figure 50). To find a product that is removed from a persisted fabric, right-click the ghost 
image, and then select Find Product. The corresponding online item appears. 



10.1.1.3 

Figure 50 Product removed from persisted fabric 
Connection status 

If more than one connection exists between products, the Physical Map shows connection status as 
follows: 

• If all connections are enabled, they appear as black lines. 

• If all connections are disabled, they appear as yellow dashed lines. 

• If one or some of the connections are disabled (but not all), the enabled connections appear as 
black lines and the disabled connections appear as yellow, dashed lines with an interswitch link 
(ISL) alert (Figure 51). 



Swath Count 2 




lOutoaooagomioi 



Figure 51 Removed connection in a persisted fabric 
Clear ISLs from the Physical Map as follows: 

• To clear an ISL alert, right-click the ISL icon and select Clear ISL Alerts. 

• To clear all ISL alerts, select Edit > Clear All ISL Alerts from the menu bar. 

Changing persisted fabrics 

When you merge two persisted fabrics, the fabric whose principal switch is also the principal switch 
in the merged fabric becomes the real fabric. It includes the switches of both fabrics in the Physical 
Map and the Product List. The other fabric becomes a ghost fabric. 
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On the Physical Map, the ghost fabric shows its original products with minus symbols (Figure 50). 
On the Product List, the ghost fabric is shown as offline without products. The fabric log resets after 
the fabrics merge. 

When you split merged fabrics, the fabric that includes the principal switch becomes the persisted 
fabric. 

When you move a product in a persisted fabric's topology, the new location is stored on the client. 
If the updated fabric is not persisted, users logged in from a different client can show an invalid 
layout. 

Configuring trap forwarding 

Trap forwarding enables you to configure the application to send SNMP traps to other computers. 
To configure trap reporting, you must configure the target computer's IP address and SNMP ports: 

1. Select Monitor > Trap Forwarding from the HAFM menu bar. 
The Configure Trap Forwarding dialog box appears (Figure 52). 
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Figure 52 Configure Trap Forwarding dialog box 

2. If necessary, add trap recipients to the Available Recipients list. 
See "Adding trap recipients" on page 87 for instructions. 

3. Select the recipient that you want to provide trap messages to in the Available Recipients list. 

4. Click the right arrow button. 

5. Scan the Selected Recipients list, and, if necessary, select recipients to move from the list and 
then click left arrow button. 

6. Select the Enable Trap Forwarding check box. 

7. Click OK. 

Adding trap recipients 

To add a trap recipient: 

1. Select Monitor > Trap Forwarding from the HAFM menu bar. 
The Configure Trap Forwarding dialog box appears (Figure 52). 

2. Click Add. 
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The Add Trap Recipient dialog box appears (Figure 53). 



Description |jns 

IP Address 172.0.0.2 Port 162 



Figure 53 Add Trap Recipient dialog box 

3. Enter the appropriate information in the following boxes: 

• Description 

• IP Address 

• Port 



[If NOTE: The HAFM appliance interprets trap data and displays the proper port value for all 

firmware levels. When traps are generated on the switch, firmware versions 4.0 and below send the 
actual port number and firmware versions 5.X and above add one to the port number to match the 
specification. However, third party applications may not correctly interpret the information. 



4. Click OK to close the Add Trap Recipient dialog box. 

5. Click OK to close the Configure Trap Forwarding dialog box. 

Removing trap recipients 

To remove a trap recipient: 

1. Select Monitor > Trap Forwarding from the HAFM menu bar. 
The Configure Trap Forwarding dialog box appears (Figure 52). 

2. Highlight the recipient you want to remove from the Available Recipients table. 

3. Click Remove. 

4. Click OK. 
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5 Monitoring SAN products 



This chapter contains the following topics, which describe the tools you can use to monitor SAN 
products. 

• Monitoring events, page 89 

• Using event notifications, page 92 

Monitoring events 

The HAFM application provides logs that you can use to monitor SAN products. You can view all 
events or specify which events you want to view. The available logs include: 

• Master log— Lists all SAN events 

• Audit Log— Lists a history of user actions (except log in/log out) 

• Event log— Lists errors related to SNMP traps and client-server communications 
Fabric log— Lists a history of changes to the fabric including: 

• ISL added to fabric 

• ISL removed from fabric 

• Switch added to fabric 

• Switch removed from fabric 

• Fabric renamed 

• Fabric persisted 

• Fabric status changed 

• Device unpersisted 

• Session Log— Lists users who have logged in and out of the HAFM appliance 

• Product state log— Lists status changes for managed products 

The application also has an event notification feature. Configure event notification to specify when 
the application notifies users of an event. See "Using event notifications" on page 92 for details. 

Viewing the master log 

The main HAFM window shows the master log (Figure 54). It provides detailed information about 
all SAN events. If the master log does not appear in main window select View > All Panels 
from the HAFM menu bar. 
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Figure 54 Master log 

The following columns are in the master log: 

• Source— The product on which the event occurred. 

• Type— The type of event that was performed (for example, client/server communication events). 

• Description— Description of the event. 

• Time— The time and date the event occurred. 

• IP— The IP address of the product on which the event occurred. 

• Node Name— The name of the node on which the event occurred. 

• Port Name— The name of the port on which the event occurred. 

Viewing other logs 

If you want to view certain types of events, but not the entire event log, you can open a specific 
log. To view more than one log, you must open a separate window for each. 

1. Select Monitor > Logs on the HAFM menu bar. 
The View Logs dialog box appears (Figure 55). 
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Figure 55 View Logs dialog box 

2. Select the log that you want to view. 

3. To view multiple logs simultaneously, select the Display in a new window check box and 
then select an additional log. 

• To clear the selected log, click Clear. 

• To refresh the selected log, click Refresh. 

4. Click OK. 
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Exporting log data 

You can export HAFM log data in tab-delimited format. This feature is useful if you want to provide 
the data to a third party or include it in a report. 

1. On the View Logs dialog box (Figure 55), select the log you want to export. 

2. Click Export. 

The Save dialog box appears. 

3. Browse to the folder where you want to save the file. 

4. Enter a file name in the File Name box. 

5. Click Save. 

To view the exported file in table format, open the file in Microsoft Excel. 
See "Exporting and importing data" on page 44 for more information. 

Filtering events in the master log 

To filter the events that appear in the master log: 

1. Click the Define link in the Master Log. 

The Define Filter dialog box appears (Figure 56). 
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Figure 56 Define Filter dialog box 

2. Select the events from the Available Events list that you want to include in the master log. 

3. Click _►]. 

4. Scan the Selected Events list and select any event you want to exclude from the master log. 

5. Click [4. 

6. Click OK. 

Copying log entries 

Use the cut (Ctrl-C) and paste (Ctrl-V) features to copy data and column headings from logs to other 
applications. Use the copy all (Ctrl-A) feature to select all from the menu. 
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[iT NOTE: When using the View Logs dialog box, you can copy only one row at a time. To copy 
multiple rows of data, copy the data from the master log on the HAFM main window. 



ing event notifications 

You can configure the application to send event notifications to e-mail addresses at certain time 
intervals. This is a convenient way to keep track of SAN events. You can also configure products to 
"call home" to notify the support center of product problems. 

nfiguring e-mail notification 

To configure e-mail notification: 

1. Select Monitor > Event Notification > Email from the HAFM menu bar. 
The Event Notification Setup dialog box appears (Figure 57). 
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Figure 57 Event Notification Setup dialog box 

2. Select the Enable Email Event Notification check box. 

3. Enter the appropriate information in the following boxes: 

• E-mail Server— IP address or name of the SMPT server 

• Reply— Recipient's e-mail address 

• Interval— Amount of time between each notification 



A CAUTION: Specifying a short interval can cause the recipient's e-mail inbox to fill quickly. 



4. Click Test Email to test the e-mail server. 

A message appears indicating if the server was found. 

5. To specify which users receive e-mail notifications, click User List. 
The HAFM 8 Server Users dialog box appears. 

6. Select the check box in the Email column for each user you want to receive notification. 

7. Click OK. 

Notifications are combined into a single e-mail and sent at the specified interval setting. An interval 
setting of 0 (zero) causes notifications to be sent immediately. 
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Configuring Call Home notification 

When you configure Call Home notification, the appliance automatically dials in to a support 
center to report system problems. Refer to the HA-Fabhc Manager Appliance installation guide for 
details. 

Enabling Ethernet events 

An Ethernet event occurs when the Ethernet link between the appliance and the managed product 
is lost. To enable Ethernet events notification: 

1. Select Monitor > Ethernet Event from the HAFM menu bar. 
The Configure Ethernet Event dialog box appears (Figure 58). 

O Enable Ethernet Event 

Ethernet Time Out minutes (1 0-1 20) 



Figure 58 Configure Ethernet Event dialog box 

2. Select the Enable Ethernet Event check box. 

3. Enter the amount of time between the event and the notification in the Ethernet Time Out 

box. 

4. Click OK. 
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6 Optional HAFM features 



This chapter provides detailed information on using, administering, and configuring optional HAFM 
features. There are two types of features: 

• Keyed features, which require the purchase of feature keys. 

• Features that do not require feature keys, but do require separate keyed features. 

This chapter describes the following topics: 

• Feature keys, page 95 

• Event Management, page 96 

• SANtegrity features, page 102 

• Open trunking, page 107 

• Performance module, page 1 10 

• Planning module, page 113 

Feature keys 

Certain HAFM optional features require the installation of a feature key to validate ownership. Refer 
to the HP StorageWorks HA-Fabric Manager Appliance installation guide for more information 
about feature keys. 

To install and enable a feature key: 

Obtain the feature key. 
2. Select Configure > Features from the Element Manager window. 
The Configure Feature Key dialog box appears (Figure 59). 
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Figure 59 Configure Feature Key dialog box 

3. Click New. 

The New Feature Key dialog box appears (Figure 60). 

jisw I ~~i 

1^ Oft | Cm* 

Figure 60 New Feature Key dialog box 
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4. Enter the feature key in the Key box. 

5. Click OK. 

Event Management 

Event Management automates tasks that are performed on the SAN. You can configure the 
application to automatically perform functions, such as: 

• Sending an e-mail notification when events or errors occur 

• Generating reports at specific times or for specific reasons 

• Exporting data 

• Playing sounds for notification of events 
This section describes the following topics: 

• Components, page 96 

• Screen, page 99 

• Rules, page 1 00 

• Managing Event Management, page 101 

Components 

The Event Management feature uses triggers and actions to create rules which determine when and 
why SAN tasks are automatically executed. 

Triggers 

Triggers define the condition that causes the action to occur or fire. There are two types of triggers: 

• Event trigger (page 97) 

• Schedule trigger (page 98) 

Both trigger types are comprised of logically-related phrases, and each phrase is composed of three 
parts: 

• Property— A variable for which you are setting values. There are many types of property 
variables. See "Reference" on page 235. 

• Operator— Defines the relationship between properties and their values. Table 1 0 lists the 
available trigger operators. Multiple operators can be defined, and phrase operators describe 
the relationship between them. 

" Value— A user-defined value, presented in a list or entered by the user. 

Hf NOTE: Once you have selected a trigger type, you can select only options within that type to 
complete the trigger phrase. 
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Figure 61 shows the dialog box you use to create a trigger phrase. 
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Figure 61 Trigger phrase development dialog box 



Table 10 Trigger operators 



Operator 


Value 




Number 


! = 


Number 


< 


Number 


<= 


Number 


> 


Number 


>= 


Number 


Contains 


String 


Does Not Contain 


String 


Starts With 


String 


Ends With 


String 



Phrase operators 

If the rule states that more than one operator must apply, phrase operators describe the relationship 
between them. The following phrase operators are used: 

• AND 

• OR 

• AND NOT 

• OR NOT 

Event triggers 

Event triggers monitor system events and fire when the specified conditions exist. You can define the 
phrases (rows) and their logical relationships. The phrases filter all the event context properties to 
identify those events that you want to trigger the event. 
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Event triggers also allow you to set time limits so that the trigger occurs only if the event happens 
within a certain time and date range. For example, you may specify that all offline events between 
5 p.m. and 8 a.m. trigger e-mail message and log actions to take place. 

Schedule triggers 

Schedule triggers monitor the system clock and fire when the specified time and date conditions are 
met. 

Schedule triggers can be set to fire: 

• Daily 

• Weekly 

• Monthly 

• One time only 
Hourly 

A CAUTION: Once you have chosen a schedule type and added the first phrase, do not change 
types or you may lose your work. 



Actions 

You can configure multiple actions to be performed when the specified triggers are fired. 
The following actions are possible: 

• E-mail— Send an e-mail to specified recipients. 
9 Export— Export data. 

• Launch — Launch an application using a script. 

• Log— Add an entry to the master log file and screen display. 

• Message— Display a message to all open clients. 

• Pause— Insert a pause between actions. 

• Report— Generate a report. 

• Sound— Play a sound. 

The launch and sound actions point to information in a file. You can select an existing option from a 
list, or add additional options to the list as follows: 

• For a launch action, add your own script files to the 

<Install_Home>\ Server \LaunchScripts directory. 

• For a sound action, add you own sounds to the <Xnstall_.ffome>\Server\Sounds 
directory. 
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[Sf NOTE: You can specify macros for some actions by clicking in the Value column and then 

right-clicking and selecting an argument from the menu. See "Writing Event Management macros" 
on page 246 for instructions. 



Screen 

To view Event Management, click the Event Management tab on the HAFM main window. All 
configured rules appear (Figure 62). From this dialog box, you can manage Event Management 
rules. See Table 11 for a description of each screen section. 

Table 1 1 Event Management tab 



Screen section 


Description 


# column 


Specifies the auto-assigned rule number. 


Actions list 


Lists the actions to be performed when the 
rule's triggers are met. 


Activate button 


Click to activate the selected rules. 


Active column 


Specifies whether the rule is on. 


Change button 


Click to change the reset interval. 


Copy button 


Click to duplicate the selected rule. 


Date Modified column 


Lists the date and time that the rule was last 
edited. 


Deactivate button 


Click to deactivate the selected rules. 


Delete button 


Click to delete the selected rule. 


Description box 


Lists the description of the selected rule. 


Description column 


Specifies the user-defined rule description. 


Edit button 


Click to edit the selected rule. 


Group column 


Lists the group to which the rule belongs. 


Name column 


Specifies the user-defined rule name. 


New button 


Click to add a new rule. 


OFF button 


Click to turn the Event Management feature 
off. 


ON button 


Click to turn the Event Management feature 
on. 


Trigger list 


Lists the trigger for the selected rule. 


User column 


Specifies the last user to modify the rule. 
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Rules 



This section provides instructions for writing rules and setting up automated tasks. Before you 
begin, decide the triggers, actions and schedules you want the rule to follow. For more information 



see: 



• Rule "Triggers" on page 96 

• Rule "Actions" on page 98 

• "Schedule triggers" on page 98 

Creating a rule 

To create a rule: 

1 . Click the Event Management tab on the HAFM main window to display Event Management 
information (Figure 62). 
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Figure 62 Event Management tab 
2. Click New. 
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The Add Rule dialog box appears (Figure 63). 
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Figure 63 Add Rule dialog box 

3. Enter information in the following boxes: 

• Name 

• Group 

• Description 

4. Select the Active check box to make the rule active after you are finished creating it. 

5. Select the type of trigger from the trigger list. 

6. Follow the instructions on the screen. 

df NOTE: Each selection on the Trigger list or Actions list shows a different dialog box with 
instructions. Follow the instructions on each dialog box to create rules. 



Managing Event Management 

You can turn Event Management on or off by clicking the on or off button on the top right corner or 
the Event Management tab. 
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Also from the Event Manager tab, you can manage the Event Management rules. Select a rule and 
then click the appropriate button to: 

• Activate the selected rule 

• Deactivate the selected rule 

• Edit the selected rule 

• Copy the selected rule 

• Delete the selected rule 

SANtegrity features 

SANtegrity includes a set of features that enhance security in Storage Area Networks (SANs) that 
contain a large and mixed group of fabrics and attached devices. Through these features you can 
allow or prohibit switch attachment to fabrics and device attachment to switches. These features are 
enabled by purchasing a feature key, then enabling the key through the Configure Feature Key 
dialog box. 

SANtegrity Binding features include: 

• Fabric Binding 

• Switch Binding 

• Enterprise Fabric Mode 

NOTE: Although Enterprise Fabric Mode is not a keyed feature, the SANtegrity Fabric Binding 
and Switch Binding must be installed before you can use the Enterprise Fabric Mode function 
through the HAFM Fabrics menu. 



Fabric binding 

This feature is managed through the Fabric Binding option, available through the Fabrics menu in 
HAFM when the Fabrics tab is selected. Using Fabric Binding, you can allow specific switches to 
attach to specific fabrics in the SAN. This provides security from accidental fabric merges and 
potential fabric disruption when fabrics become segmented because they cannot merge. 

Switch binding 

This feature is managed through the Switch Binding submenu options available on the Element 
Manager Configure menu. Using Switch Binding, you can specify devices and switches that 
can attach to a director and switch ports. This provides security in environments that include a 
large number of devices by ensuring that only the intended set of devices attach to a switch or 
director. 

Configuring switch binding overview 

To configure Switch Binding, you must first activate the feature using the Switch Binding - State 
Change dialog box while selecting the type of port where you want to restrict connection 
(connection policy). Possible selections are E_Ports, F_Ports, or all types. 
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If the director or switch is online, activating Switch Binding populates the Membership List in the 
Switch Binding ■ Membership List dialog box (Element Manager). The following WWNs can 
currently be connected to the director or switch, depending on the connection policy set in the 
Switch Binding - State Change dialog box: 

• WWNs of devices connected to F Ports (F_Port connection policy). The WWN is the WWN of 
the attached device's port. 

• WWNs of switches connected to E_Ports (E_Port connection policy). The WWN is the WWN 
of the attached switch. 

• WWNs of devices connected to F_Ports and switches connected to E_Ports (all-ports connection 
policy). 

Notes: 

• When the Switch Binding feature is first installed and has not been enabled, the Switch 
Membership List is empty. When you enable Switch Binding, the Membership List is populated 
with WWNs of devices, switches, or both that are currently connected to the switch. 

• If the switch is offline and you activate Switch Binding, the Membership List is not automatically 
populated. 

• Edits to the Switch Binding Membership list is maintained when you enable or disable Switch 
Binding. 

After enabling Switch Binding, you prohibit devices and switches from connecting with director or 
switch ports by removing them from the Membership List in the Switch Binding - Membership List 
dialog box. You allow connections by adding them to the Membership List. You can also add 
detached nodes and switches. 

Enable/disable switch binding 

Use the following procedure to enable and disable switch binding: 

1. Choose Configure > Switch Binding > Change State from the Element Manager 

window. The Switch Binding - State Change dialog box displays (Figure 64). 
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Figure 64 Switch Binding ■ State Change dialog box 

2. Perform one of the following steps: 

• To disable Switch Binding (a check mark displays in the Enable Switch Binding check 
box), click the Enable Switch Binding check box to remove the check mark, then click 
Activate. 
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• To enable Switch Binding (check mark is not in the Enable Switch Binding check box), 
click the Enable Switch Binding check box to add a check mark. Go on to step 3 to set 
the Connection Policy. 

3. Click one of the Connection Policy options. 

• Restrict E_Ports— Select if you want to restrict connections from specific switches to switch 
E_Ports. Switch WWNs can be added to the Switch Membership List to allow connection 
and removed from the Membership List to prohibit connection. Devices are allowed to 
connect to any F Port. 

• Restrict F_Ports— Select if you want to restrict connections from specific devices to switch 
F_Ports. Device WWNs can be added to the Switch Membership List to allow connection 
and removed from the Membership List to prohibit connection. Switches are allowed to 
connect to any EPort. 

• Restrict All— Select if you want to restrict connections from specific devices to switch F_Ports 
and switches to switch E_Ports. Device and switch WWNs can be added to the Switch 
Membership List to allow connection and removed from the Membership List to prohibit 
connection. 

4. Click Activate to enable the changes and close the dialog box. 

5. Edit the Switch Membership List through the Switch Binding - Membership List dialog box to add 
or remove switches and devices that are allowed to connect with the switch. 

Editing the Switch Membership List 

1. Choose Configure > Switch Binding > Edit Membership List from the Element 
Manager window. The Switch Binding - Membership List dialog box displays (Figure 65). 

The WWNs of devices and switches that can currently connect to switch ports are listed in the 
Switch Membership List panel. 
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Figure 65 Switch Binding Membership List dialog box 
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See "Editing the Switch Membership List" on page 104" for information on how the Switch 
Membership List is populated with WWNs according to options set in the Switch Binding - 
State Change dialog box. 

2. If nicknames are configured for WWNs through HAFM and you want these to display instead of 
WWNs in this dialog box, click Display Options. 

The Display Options dialog box displays. 

3. Click Nickname. 

4. Click OK. 

5. To prohibit connection to a switch port from a WWN currently in the Membership List, click the 
WWN or nickname in the Membership List. 

6. Click Remove. 

The WWN or nickname moves to the Node List panel. 

WWNs can only be removed from the fabric if any of the following is true: 

• The switch is offline. 

• Switch Binding is disabled. 

• The switch or device with the WWN is not connected to the switch. 

• Switch Binding is not enabled for the same port type as enabled for the Connection Policy in 
the Switch Binding - State Change dialog box. For example, a WWN for a switch attached 
to an E_Port can be removed if the Switch Binding Connection Policy was enabled to Restrict 
F_Ports. 

• The switch or device with the WWN is connected to a port that is blocked. 

• The switch or device with the WWN is not currently connected to the switch (detached 
node). 

WWNs can be added to the Switch Membership List (and thereby allowed connection) 
when Switch Binding is either enabled or disabled. 

7. To allow connection to a switch port from a WWN in the Node List panel, select the WWN 
or nickname in the Node List panel 

8. Click the Add button. 

The WWN or nickname moves to the Membership List panel. 

9. To add a WWN for a device or switch not currently connected to the switch, click Detached 
Node. 

The Add Detached Node dialog box displays. 

10. Enter the appropriate WWN or nickname (if configured through HAFM) and click OK. 
The WWN or nickname displays in the Switch Membership List. 

1 1 .Click Activate to enable the changes. 
12. Close the dialog box. 

Enable/disable and Online state functions for Domain ID 

In order for Fabric Binding to function, specific operating parameters and optional features must be 
enabled. Also, there are specific requirements for disabling these parameters and features when 
the director or switch is offline or online. Be aware of the following: 
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• Because switches are bound to a fabric by World Wide Name (WWN) and domain ID, the 
Insistent Domain ID option in the Configure Switch Parameters dialog box is automatically 
enabled if Fabric Binding is enabled. 

• If Fabric Binding is enabled and the switch is online, you cannot disable Insistent Domain ID. 

• If Fabric Binding is enabled and the director or switch is offline, you can disable Insistent 
Domain ID, but this disables Fabric Binding. 

• You cannot disable Fabric Binding or Switch Binding if Enterprise Fabric Mode is enabled. 
However, if Enterprise Fabric Mode is disabled, you can disable Fabric Binding, Switch 
Binding, or both. 

Enable/disable and Online state functions for Switch Binding 

In order for Switch Binding to function, specific operating parameters and optional features must 
be enabled. Also, there are specific requirements for disabling these parameters and features 
when the director or switch is offline or online. Be aware of the following: 

• Switch Binding can be enabled or disabled whether the switch is offline or online. 

• Enabling Enterprise Fabric Mode automatically enables Switch Binding. 

• You cannot disable Switch Binding if Enterprise Fabric Mode is enabled. 

• If Enterprise Fabric Mode is enabled and the director or switch is online, you cannot disable 
Switch Binding. However, if Enterprise Fabric Mode is disabled, you can disable Fabric 
Binding, Switch Binding, or both. 

• If Enterprise Fabric Mode is enabled and the director or switch is offline, you can disable 
Switch Binding, but Enterprise Fabric Mode disables. 

• WWNs can be added to the Switch Membership List when Switch Binding is enabled or 
disabled. 

• WWNs can only be removed from the Switch Membership List if any of the following are true: 

• The director or switch is offline. 

• Switch Binding is disabled. 

• The switch or device with the WWN is not connected to the director or switch. 

• Switch Binding is not enabled for the same port type as enabled for the Connection Policy in 
the Switch Binding - State Change dialog box. For example, a WWN for a switch attached 
to an E Port can be removed if Switch Binding Connection Policy was enabled to Restrict 
F_Ports. 

• The switch or device with the WWN is connected to a port that is blocked. 

• The switch or device with the WWN is not currently connected to the director or switch 
(detached node). 

• If the director or switch is online and Switch Binding is not enabled, all nodes and switches 
attached to the director or switch are automatically added to the Switch Membership List. 

Zoning with Switch binding enabled 

SANtegrity has no effect on existing zoning configurations. However, note that if a device WWN 
is in a specific zone, but the WWN is not in the Switch Membership List, the device cannot log in 
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to the director or switch port and cannot connect to other devices in the zone with Switch Binding 
enabled. 

Port fencing 

Port Fencing is a policy-based feature that allows the user to set thresholds on port events. If the 
port generates more events in a user specified time period than the user thinks he should tolerate, 
the Port Fencing feature blocks the port, disabling transmit and receive traffic until the user has a 
chance to investigate, solve the problem, and manually unblock the port. 

Port fencing dialog box 

The Port Fencing dialog box (Figure 66) is accessed from the Configure menu by clicking the Port 
Fencing option. The Port Fencing dialog box displays the existing policies that are discovered on 
HP directors and switches running E/OS ZOfj. Use this dialog to name a policy, set the limit and 
period and select objects to which to apply the policy. If a switch does not support Port Fencing, 
the ISL threshold field displays a Port Fencing Not Supported message. 
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Figure 66 Port Fencing dialog box 

Open trunking 

Open trunking is a keyed feature that monitors the data flows on ISLs (from a receive port to a 
target domain) and periodically reroutes data from congested links to lightly loaded links. Open 
trunking makes the most efficient use of redundant ISLs between switches. 

Load balancing does not require user configuration, other than to enable open trunking. However, 
you can modify default settings for congestion thresholds (per port). 

You do not need to manually configure ISLs into trunk groups of redundant links where data can be 
off-loaded. Open trunking identifies candidate links for rerouting and maintains the links 
automatically. 
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This section describes the following topics: 

• Options, page 108 

• Configuration, page 108 

• Global threshold changes, page 1 09 

• Open Trunking log, page 1 10 

Options 

Access open trunking through the HAFM menu bar. Figure 67 shows the Configure Open Trunking 
dialog box. Table 1 2 describes the function of each option. 

Table 12 Open trunking configuration options 



Option 


Function (when enabled) 


Enable Open Trunking 


Enables the open trunking option 


Congestion Thresholds 


Sets the congestion threshold levels for ports as 
percentages (1 % — 99%) of link bandwidths. When 
the link's traffic load becomes congested, traffic is 
rerouted (if possible) to an uncongested link. Two 
options are available: 

Ocicci iric cricCK uox unoci iric ubc MigoriTnrriic 
Threshold column to use a value computed by the 
rerouting algorithm. 

• Click in the Threshold % column, and enter a 
value in the range of 1 through 99. 


Event Notification 


Identifies the type of events that result in an event log 
entry, and generates an SNMP trap. The notifications 
occur on first instance only. The event notification 
types are: 

• Unresolved congestion— the rerouting algorithm 
cannot find a path for rerouting data flow to 
relieve congestion. 

• Back Pressure— the low BBcredit threshold has 
been exceeded. 


Low BB Credit threshold 


Defines the acceptable percent of time that the 
transmitting link has no BB credit. Two options are 
available: 

• Default threshold value 

• User defined threshold value 



Configuration 

To enable open trunking for a switch and configure threshold values and event notification options: 
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1. Select Configure > Open Trunking from the HAFM menu bar. 
The Configure Open Trunking dialog box appears (Figure 67). 
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Figure 67 Configure Open Trunking dialog box 

2. Select the Enable Open Trunking check box. 

3. Specify the congestion threshold value. 

If you do not specify a threshold value for a port, open trunking uses a default value that is 
based on port type (1 Gb/s or 2 Gb/s) and channel bandwidth. 

4. Select the Event Notification options, as appropriate. 

5. Set the low BB Credit threshold value. 

6. Click Activate to enable these values on the switch and close the dialog box. 

Global threshold changes 

In the Configure Open Trunking dialog box, right-click on a column in the Configuration Threshold 
table to display menu options that globally change values. 

• Use Algorithmic Threshold— Right-click this column to display these options: 

• Set All to Default— Adds check marks to all check boxes in this column and sets all cells 
of Threshold % column to default values 

• Clear All— Clears all check boxes in this column and restores values in cells of Threshold % 
column with previous values 

• Threshold %— Right-click this column to display these options: 

• Set All To xx— Sets all cells in this column to the value (xx) that you clicked 

• Restore All— Sets all cells in the column to the previous values 
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Open Trunking log 

The Open Trunking log (Figure 68), provides details on flow rerouting through switch ports. 




Figure 68 Open Trunking log 
The log lists the following: 

• Date/Time— The date and time of the rerouting occurrence 

• Receive Port— The receive port number (decimal) on the local switch associated with the flow 
that was rerouted 

• Target Domain— The domain ID (decimal) associated with the flow that was rerouted 

• Old Exit Port— The exit port number (decimal) on this switch that the flow used to access the 
target domain 

• New Exit Port— The exit port number (decimal) on this switch that the flow now uses to 
access the target domain 

Performance module 

Performance Module is a feature that you use to monitor SAN devices. For information about event 
monitoring and notification, see the HAFM online Help. 

This section discusses the following topics: 

• Displaying connection utilization, page 1 10 

• Monitoring switch performance, page 1 1 1 

• Collecting performance data, page 1 1 1 

• Monitoring port performance, page 1 1 2 

Displaying connection utilization 

The HAFM application shows the percentage of data utilization of the trunks. 
To display the connection utilization legend: 
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Select Monitor Utilization > On from the main window menu bar (or press Ctrl+U). 
To turn utilization off: 

Select Monitor > Utilization > Off from the main window menu bar. 
See "Viewing the HAFM main window" on page 28 for details. 

Monitoring switch performance 

A performance graph shows transmit, receive, and error data from the switch ports to the 
connected devices. The graphs can be sorted by the errors, transmit data, or receive data. 

To monitor switch performance: 

1. Right-click a switch icon on the HAFM Physical Map and select Performance Graphs. 

The Performance Graph dialog box appears (Figure 69). 
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Figure 69 Performance graph dialog box 

2. Select the type of data to display from the Data list. 

3. Select the error data to display from the Errors list. 

Collecting performance data 

You can collect performance data about your SAN and then view it or export it and distribute the 
data to others. 

Storing performance data 

To store SAN performance data select Monitor > Performance > Store Data from the HAFM 
menu bar. 
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Viewing performance data 

Refer to the HAFM online Help for instructions to generate and view HTML reports of performance 
data. 

Exporting performance data 

To export SAN performance data to communicate issues to the support center, capture network 
status, and archive historical data see "Exporting and importing data" on page 44 or refer to the 
HAFM online Help. 

(if NOTE: Currently, you can export only to the same versions of the application. 



Monitoring port performance 

You can monitor the performance of switch ports devices in the SAN using the port performance 
graph. The graph also shows information about transmit and receive performance. 

To monitor port performance: 

1. Right-click a switch icon on the Physical Map and select Performance Graphs. 

The Performance Graph dialog box appears (Figure 69). 

2. Select a port row and click History/Events (or double-click a port row) to display the Port 
Performance Graph dialog box (Figure 70). 
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Figure 70 Port Performance Graph dialog box 

3. Select options from the following lists to customize the performance graph: 
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• Measure— Assigns a unit of measure for the graph 

• Time Range— Selects a time range 

Histogram Display— Shows the percentage of trunk utilization over a period of time 
Move the Histogram slide-bar to change the period of time displayed. 

• Linear Display— Shows a linear average of the trunk utilization 

This function provides a forward-looking trend analysis and is intended to notify the user of 
resource modeling problems. 

• Running Average Display— Applies an averaging algorithm to the display 

This display can be adjusted on a varying percentage of an hour. To change the display, move 
the slide-bar. 

4. Select the check boxes next to Q and /j\ to define the boundaries to configure both high and 
low usage performance warnings and critical thresholds. 

5. Adjust the slide-bars at the right side of the display. 

As you move a slide-bar, the percentage of utilization is displayed in the associated field. 

6. Set separate transmit and receive thresholds in either %Utilization or MB/sec. Set separate 
error thresholds. 

If Running Average Display is selected, your thresholds are triggered only if the running 
average crosses the threshold. 

7. Click Apply to All Ports if you want to apply your changes to all ports on the device. 

8. Click OK. 



[|f NOTE: Port performance data and thresholds are indexed by node name. If you move a switch 
from one location to another, it brings its performance data and thresholds with it. Additionally, if 
a threshold is set in one SAN file and the same port is discovered in a different SAN file, the 
threshold is defined in both files. 



Planning module 

The Planning module enables you to plan and evaluate a SAN before you implement the design. 
You can use a discovered SAN as the basis for a plan, eliminating the need to duplicate a design. 

This section describes the following topics: 

• Planning window, page 1 1 3 

• Plan design, page 1 14 

• Planning rules, page 1 1 8 

• Plan evaluation, page 1 22 

• Plan conservation, page 1 23 

Planning window 

The planning window (Figure 71 ) differs slightly from the window that shows a discovered SAN. 
The Planning window has: 
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• Three tabs: 

• Physical Map 

• Product List 

• Event Management 

• A menu bar. 

Click a menu item to see a list of available options. 

• A device toolbox. 

The toolbox provides tools to add, select, and connect devices in the SAN. To see a definition 
a tool, position your curser over the tool. 

• Master log. 
Minimap. 

To open the planning window select View > Planned SAN from the HAFM menu bar. 
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Figure 71 Planning window 

Plan design 

By designing a plan, you can configure, connect, and arrange planned devices. This saves you 
cost and time by enabling you to evaluate the plan before implementing the design. 

Planning a SAN 

To plan a new SAN: 

1. Select SAN > New Plan (or press Ctrl+N) from the Planning window menu bar. 
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The New Plan dialog box appears (Figure 72). 
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Figure 72 New Plan dialog box 

2. Enter a name in the New Plan box. 

3. Select one of the following options: 

• Start with discovered topology to use the discovered topology as the basis for the new 
plan 

• Start Empty to start the new plan with an empty topology 

4. Click OK. 

Opening a plan 

1. Select SAN > Open Plan from the Planning window menu bar (or press Ctrl+O). 
The Open Plan dialog box appears (Figure 73). 
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Figure 73 Open Plan dialog box 

2. Select a plan from the Open Plan list. 

3. Click OK. 

Adding devices 

You can add one device or multiple devices to the plan. 

• To add one device: 

a. Click a device icon on the devices toolbox. 

b. Click the Physical Map in the Planning window. 

The new planned device icon appears on the Physical Map. 

• To add multiple devices: 

a. Click the devices icon on the devices toolbox. 
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The Insert Multiple Devices dialog box appears (Figure 74). 



1 — j 
1 1 




| Hub[» 


□ 


Swrtch(es) 


| Bridgets) 


□ 


Storage 


I | Tape[s) 


□ 


JBOD(s) 


1 j NAS DeviceCs) 


□ 


Server 








| OK | Cancel | 



Figure 74 Insert Multiple Devices dialog box 

b. Enter a quantity for each device type you want to add. 

c. Click OK. 

Arranging devices 

After adding devices to your plan, you can rearrange them: 

1. Click the Select Devices icon ( t^ 1 ) on the devices toolbox. 

2. Click a planned device icon and drag it to the desired location. 

3. Repeat as necessary. 

Connecting devices 

To connect the devices in your plan: 

1. Click the Connect Devices icon (\J) on the devices toolbox. 

2. Click a device on the Physical Map. 

A connection is created and associated with the first available port on the device. 

3. Click another device on the Physical Map. 

The connection is associated with the first available port on the second device. A connection 
appears between the two devices. 

4. If you want to make multiple connections, click the Connect Devices icon ( \J), hold down the 
Shift key, and click each device you want to connect. 

Configuring devices 

You can specify properties for planned devices: 

1. Right-click a planned device icon on the Physical Map and select Properties. 
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The planned device's Properties dialog box appears (Figure 75). 
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Figure 75 Planned device Properties dialog box 

2. Enter a nickname for the device in the Nickname box (optional). 

3. Enter or edit information. 

4. Click OK. 

Deleting devices 

To delete planned devices right-click on the planned device icon on the Physical Map and select 
Delete. 

Displaying a planned device as an installed device 

Right-click on a planned device icon on the Physical map and select Planned Device. 

• If the Planned Device option is selected, the device icon appears inside a box icon. 

• If the option is not selected, the device icon appears without a box. 

Editing port types 

You can arrange devices and edit a planned device's port types: 



|?f NOTE: You can perform this task only in the Planning window. 



1. Select View > Planned SAN from the Planning window menu bar. 

2. Add devices as necessary. 

3. Rearrange devices as necessary. 

4. Connect the devices. 

5. Right-click a planned device icon and select Ports to view the device's ports. 

6. Click the black arrow next to the port number. 
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The Port Properties dialog box appears (Figure 76). 
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Figure 76 Port Properties dialog box 

7. Enter a port number in the Port Number box. 

8. Select a port type from the Port Type list (available only for multiport devices). 

9. Click OK. 

10. Optionally, right-click a planned device icon and select Planned Device. 

The device changes from a planned device to an implemented device. 

Configuring ports 

You can configure port numbers and types for planned devices. 

Hf NOTE: To configure planned ports, planned devices must be connected. 

1. Right-click a planned device icon on the Physical Map and select Ports. 

2. Click the small triangle next to the port number. 
The Port Properties dialog box appears (Figure 76). 

3. Enter a number in the Port Number box. 

4. Select a port type from the Port Type list. 

5. Click OK. 

Planning rules 

This section describes how to use planning rules to evaluate a plan. 

Planning rules specify criteria for a plan evaluation. Rules are stored in the text file 

<Xnstall_Home>\Server\Conf ig\Other\rules . dat . You can open the rules.dat file 
using any text editor. 

Planning rules syntax and format 

Planning rules must follow a certain syntax and format. Table 13 describes the planning rule 
parameters. 

[if NOTE: You must be an advanced user with administrator privileges to edit planning rules. 
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The following example shows the syntax for a planning rule: 

set rule_id = SAN_1 

where rule = "check_f or_valid IPAddress for (device=switch or device=hub or 
device=bridge) " 

and description = "valid IP addresses must be specified for all switches, 
hubs and bridges" 

and headline = "Valid IP must be specified/property validation" 
and errormssg = "The device labeled {0} has invalid IP address" 
and remedy = "Please specify a valid IP address"; 



Table 13 Planning rule parameters 



Parameter 


Required 
to load 
rule? 


Description 


Format 


set rule_id 


Yes 


Sets the rule ID. 


Must be a unique value, 
but can be any length and 
format. 


where rule 


Yes 


Sets the actual rule. 

A list of rule types 
follows this table. 


Use only the keywords 
provided; otherwise the 
rule fails. 


description 


No 


Provides a more 
detailed description of 
the rule. 


Must be prepended with 
an "and." 

Must be enclosed within 
quotation marks. 


headline 


No 


Provides a short 
overview of the rule. 


Must be prepended with 
an "and." 

Must be enclosed within 
quotation marks. 


errormsg 


No 


Specifies the error 
message to appear if 
the rule is violated. If 
this statement is not 
specified, or if it is null, 
a generic error 
message appears. 


Must be prepended with 
an "and." 

Must be enclosed within 
quotation marks. 


remedy 


No 


Specifies a remedy for 
the rule violation. This 
text appears on the 
evaluation screen. 


Must be prepended with 
an "and." 

Must be enclosed within 
quotation marks. 



Rule types 

There are three types of rules that define the where rule parameter: 
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• Connection rules specify which devices can be connected in a plan (see Table 14). 

• Property validation rules verify the validity or uniqueness of device names in a plan (see 

Table 15). 

• Capacity control rules verify the connections in a plan (see Table 16). 
Keywords 

The where rule parameter allows the following keywords: 
§T NOTE: Keywords are not case sensitive. 

• Types: 

• Device 

• Network 

• Zone 

• Fabric 

• Switch, Hub, Bridge, NAS, HBA, Storage, Tape, JBOD, Loop, Server 

• Property names: 
. WWN 

• PortWWN 

• Model 

• IPAddress 

• serialNumber 

• Vendor 

• Firmware 

• PortType 

• PortNumber 

• ZoneName 

• F_Port, FL_Port, TL_Port, E_Port, NL_Port, N_Port, H_Port, UNKNOWN_PORTs 

• MAXPORTS 
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• Operators: =, <, <=, >, >= 
Table 14 Connection rules 



Syntax 


Description 


do_not_connect (device=x) 


Never connect device x\o device x. 


do_not_connect (device=x) to 
(device=y) 


Never connect device x\o y. 


do_not_connect (device=x) to 
(device=y) through (device=z) 


Never connect device x\o y through z. 


do_not_attach (device=x) to 
(device=y) 


Never connect device jcinto a SAN that 
has device y. 


connect (device=x) 


Always connect device x\o device x. 


connect (device=x) to (device=y) 


Always connect device x\o y. 


connect (device=x) to (device=y) 
through (device=z) 


Always connect device x\o y through z. 



Table 15 Property validation rules 



Syntax 


Description 


checkforvalid ' Property Name' for 
(device=x) 


Device jcmust have valid 
' PropertyName '. 


' PropertyName' 
should_be_unique_in 'Types' 


Cannot have duplicate 
'PropertyName' in the 
same 'Typed. 



Table 16 Capacity control rules 



Syntax 


Description 


total_connections (device = x) 
'Operator 1 2 


The sum of connections to 
device x should be 
'Operator 1 than 
2total_connections. 


(device = x) 'Operator" 
MAXPORTS 


The sum of connections to 
device x should be 
Operator* than MAXPORTS. 


total_connections (device = x) to 
(device = y) 'Operator" 2 


The sum of connections from 
device x\o device y should be 
'Operator 1 than 2. 



Applying rules for plan evaluation 

To apply rules for evaluating the plan: 

1. Select View > Planned SAN from the HAFM menu bar. 
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The Planning window appears (Figure 71). 
2. Select Plan > Set Rules from the Planning window menu bar. 
The Planning Rules dialog box appears (Figure 77.) 
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Figure 77 Planning Rules dialog box 



[|f NOTE: If spelling or syntax errors are detected, the rule may not appear in the Planning Rules 
dialog box. 



3. Select the rules you want to apply when evaluating the plan. 

4. Click OK. 

Plan evaluation 

To evaluate a plan: 

1. Select SAN > Open plan from the Planning window menu bar to open the plan. 

2. Select Plan > Evaluate. 

The application evaluates the plan and shows the results in the SAN Evaluation Report window. 

3. Review the report. Click the hyperlinks to jump to devices and view the tips to determine 
resolutions. 

4. Resolve the issues. 

5. Select Plan > Evaluate to revaluate the plan. 

6. If more problems are identified, repeat step 2 through step 5. 
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Plan conservation 

This section describes how to save, export, and print a plan. 
Saving a plan 

After you design a plan, you can save it for future reference. 

To save a plan with its current name select SAN > Save Plan, from the planning window menu 
bar: 

The plan is saved with the current name. 
To save a plan with a new name: 

1. Select SAN > Save as Plan from the Planning window menu bar. 
The Save As dialog box appears. 

2. Enter a new file name in the Save As box. 

3. Click OK. 

Exporting a plan 

You can export planning files to share your plan with others or to archive it for future reference. 
Follow the instructions described in "Exporting data" on page 44. 
Printing a plan 

You can export a plan as a Physical Map in JPG format. You can then print the JPG file from a photo 
application or a web browser. 
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7 Zoning 



Zoning defines the communication paths in a fabric. A zone consists of initiator and target ports in 
the SAN. Ports can communicate only with other ports in their zone. However, ports can be 
members of more than one zone. To zone devices in a fabric, the fabric's principal switch must be 
an HP switch and HAFM must discover and manage it. 

HAFM performs zoning discovery once at startup, and thereafter once every two hours during 
routine discovery. For best results, HP recommends that you perform zoning five discovery cycles 
after starting the HAFM appliance. 

The following zoning features are described: 

• Zoning limits, page 1 25 

• Zoning naming conventions, page 1 26 

• Zoning configuration, page 126 

• Zoning administration, page 134 

Zoning limits 

You can configure large zone sets with HAFM. Table 1 7 lists the zoning limits for the edge 
switches and directors. 



df NOTE: Hard zoning is enforced when the firmware initializes. Devices not conforming to zoning 
rules are restricted to their assigned zones. 



Table 17 Zoning parameter limits 



Zoning parameter 


Maximum value 


Number of zone members in a zone 


2048 


Number of zones in a zone set ' 


1024 


Number of unique zone members in a 
zone set 


2048 


Total number of zone members in a 
zone set (where a zone member can 
be in multiple zones) 


4096 


Characters per zoning name 


32 


Number of unique zone members in 
HAFM zoning library 


2048 


Number of zones in HAFM zoning 
library 


1024 
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Zoning parameter 


Maximum value 


Number of zone sets in HAFM zoning 
library 


64 


Number of end ports 


1024 


Number of devices supported 
(including loop devices) 


1024 



1 . The supported number of zones is based on a zone name with a maximum of 
32 characters. On all edge switches and directors (except the Director 2/1 40), 
the maximum number of zones decreases if the names are 64 characters long. 
The limits are based on two members per zone. 



Zone set sizes are determined by the: 

• Number of zones in the zone set 

• Length of each zone name 

• Number of members in each zone 
Interoperability mode of the fabric 

Contact HP Professional Services or your support representative if you have questions regarding 
specific zone set configurations. 

Zoning naming conventions 

The following rules apply for zone names and zone set names: 

• Names must begin with alphabetic characters, but can include alphanumeric characters and 
underscores. 

• Names must be unique and are case insensitive. 

• Names cannot include spaces. 

• Names cannot begin with SANav_. This prefix is reserved. 

• Names can have a maximum of 57 characters. 

• No duplicate names are allowed in zones, zone sets, or zone libraries. 

Zoning configuration 

Use the Zoning dialog box (Figure 78) to configure zoning. When the Zoning dialog box is open, 
zoning discovery is performed during every polling cycle for up to 30 minutes, after which it is 
performed once every two hours. 

You can: 

• Display the zone library (see "Displaying the zone library" on page 1 27). 

• Create and add a zone to a zone set (see "Adding a zone to a zone set" on page 1 28). 

• Create and add members to a zone (see "Adding a member to a zone" on page 1 28). 

• Create a zone set (see "Creating a zone set" on page 1 29). 

• Remove a member from a zone (see "Removing a member from a zone" on page 1 30). 
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• Remove a zone from a zone set (see "Removing a zone from a zone set" on page 1 30). 

• Activate a zone set (see "Activating a zone set" on page 1 30). 

• Deactivate a zone set (see "Deactivating a zone set" on page 131). 

• Enable or disable the default zone (see "Enabling and disabling the default zone" on 
page 1 32). 

Export a zone set (see "Exporting a zone set" on page 1 33). 

• Import a zone set (see "Importing a zone set" on page 1 34). 



Hf NOTE: Only one appliance should perform discovery at a time; otherwise logon conflicts may 
occur. 



Displaying the zone library 

To display the zone library: 

1. Select Configure > Zoning from the HAFM menu bar. 
The Zoning dialog box appears. (Figure 78). 



If 100000E0691 09238 
Zone Library; Active Zone Set 
potential Zone Members 



ProriuctsjKorts 



E || 2000002037D9190A 
E || 2000002037D91ADE 
E §i 2000002037D91DCO 
E : J 500601 608802C0F7 
E 200000E08B071F7S 
E ^ 200000E08B07590E 
□ ^ 200000E08B085186 
E ^ 200000E08B09D81B 



> 



Zoning Metir : World V^flde Name ▼ 



New Zone New Membe . 



New Set Export Import 



Figure 78 Zoning dialog box 

2. Select a fabric from the Fabric list. 

This defines the fabric for the zoning actions. 

3. Click the Zone Library tab. 
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The Zones, Zone Sets, and Potential Zone Members lists are displayed. 



[|f NOTE: If the Zoning dialog box is open for longer than 30 minutes, the information displayed may 
not be current. Re-open the dialog box to increase zoning discovery speed and get the updated 
information. 



Adding a zone to a zone set 

To add a new or existing zone to a zone sets: 

1. Display the zone library. (See "Displaying the zone library" on page 1 27). 
The Zoning dialog box appears. 

2. To create a new zone, click New Zone. 
A new zone appears in the Zones list. 

3. To add an existing zone, proceed to step 9. 

4. Rename the zone. (See "Zoning naming conventions" on page 1 26). 

5. Select the members to add to the new zone from the Potential Zone Members list. 

6. Select the new zone from the Zones list. 

7. Click _|J to the right of the Potential Zone Members list to add the selected members to the zone. 

8. Select an option from the Zoning Method list. 

9. Select the zone sets to which you want to add the zone from the Zone Sets list. 
10. Select the zones you want to add to the zone set from the Zones list. 

1 1 .Click to the right of the Zones list to add the selected zones to the zone sets. 

12. To activate the zone set, see "Activating a zone set" on page 1 30. 

13. Click OK. 

Adding a member to a zone 

To add a new or existing member to a zones: 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 

2. Select the zones to which you want to add members to from the Zones list. 

3. To add an existing member, skip to step 7. 

4. To create a new member, click New Member. 
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The Add Zone Member dialog box appears (Figure 79). 
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Figure 79 Add Zone Member dialog box 

5. Specify a zone member by its domain and port ID or world wide name (WWN) address. 
Hf NOTE: Zoning by domain and port is supported only in Homogeneous Fabric interop mode. 



Do one of the following: 

• Select Domain/Port and enter the domain and port IDs in the appropriate boxes. 

• Select WWN and enter the WWN address. 



Hf NOTE: If you select an invalid domain/ port value or WWN address and then activate the zone 
set, the application shows a zoning mismatch message after the next discovery pass. 



6. Click OK to save your changes and close the Add Zone Member dialog box. 
The Zoning dialog box appears. 

7. Select an option from the Zoning Method list. 

8. Select the members to add to the zone from the Potential Zone Members list. To add all ports on 
a device, select the device. 

9. Click to the right of the Potential Zone Members list to add the selected members to the 
zone. 

10. Click OK to save the zoning library changes. 

df NOTE: If you click Cancel or the close button (X) without clicking OK, only the changes that you 
made to the active zone set are saved. 



Creating a zone set 

To create a new zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 177). 
The Zoning dialog box appears (Figure 78). 

2. Click New Set to create a new zone set. 

3. Rename the zone set. See "Zoning naming conventions" on page 126. 
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4. Press Enter. 

5. Select the zones you want to add to the zone set from the Zones list. 

6. Click _]►] to the right of the Zones list to add the selected zones to the zone set. 

7. To activate the zone set, see "Activating a zone set" on page 1 30. 

8. Click OK. 

Removing a member from a zone 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Expand a zone by clicking the + symbol in the Zones list. 

3. Right-click the member you want to remove and click Remove. 

4. Click OK. 

Removing a zone from a zone set 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Expand a zone set by clicking the + symbol in the Zone Sets list. 

3. Right-click the zone you want to remove and click Remove. 

4. Click OK. 

Activating a zone set 

|?f NOTE: Activation speeds may vary depending on the hardware vendor and type of zoning used. 
To activate a zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Select a zone set from the Zone Sets list. 

3. Click Activate. 
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The Activate Zone Set dialog box appears (Figure 80) 
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Figure 80 Activate Zone Set dialog box 

4. Verify the information and click OK. 

A confirmation message appears (Figure 81 ). 



You ai± -!uuj to «i*irft □ JuW SfH in Iht luti L. 
A t VOU Suit >uU VsuJd it tO uOddfu^ 



Figure 81 Activate Zone Set confirmation message 

5. Click Yes to continue. 

The Zoning dialog box appears. 

6. Click the Active Zone Set tab to view the active zone set and its zones. 
Verify that the switch is being managed properly. 



If NOTE: Only one appliance should perform discovery at a time; otherwise logon conflicts may 
occur. 



7. Click OK. 

Deactivating a zone set 

To deactivate a zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Click Deactivate. 
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The Deactivate Zone Set dialog box appears (Figure 82). 
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Figure 82 Deactivate Zone Set dialog box 

The dialog box shows the names of the active zone set, and shows the new active zone set as 
none. Verify the information in this dialog box. 

3. Click OK. 

The active zone set and its zones are deactivated. 



[Sf NOTE: If the default zone is enabled and the active zone set is deactivated, members of the zone 
may still be able to communicate. 



Enabling and disabling the default zone 

By enabling the default zone the potential zone members that are not in zones can see all other 
potential members that are not in zones. 

To enable the default zone: 

1. Display the zone library. (See "Displaying the zone library" on page 177). 
The Zoning dialog box appears (Figure 78). 

2. Select the fabric for which you want to enable the default zone. 

3. Enable the default zone by selecting the Default Zone button. 

4. Click OK. 



132 Zoning 



If NOTE: Default zones are only supported in Homogeneous Fabric interop mode. Default zones are 
not supported in Open Fabric interop mode. If default zoning is not available, the Default Zone 
button is disabled. 

To disable the default zone: 

1. Display the zone library. (See "Displaying the zone library" on page 177). 
The Zoning dialog box appears (Figure 78). 

2. Select the fabric for which you want to disable the default zone. 

3. Disable the default zone by clearing the Default Zone button. 

4. Click OK. 

Exporting a zone set 

You can export a zone set as an XML file and import it into a different zone set library on the HAFM 
appliance or to a zone set library on another appliance. 

[if NOTE: You can export only one zone set at a time. 

To export a zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Select the zone set that you want to export in the Zone Sets list. 

3. Click Export. 

The Export Zone Set dialog box appears (Figure 83). 
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Figure 83 Export Zone Set dialog box 

4. Select the folder in which you want to save the XML file. 

5. Enter a name for the file in the File name box. 

6. Click Export Zone Set. 
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The file is saved to the specified folder. 
7. Click OK. 

Importing a zone set 

To import a zone set XML file into a zone set library: 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Click Import. 

The Import Zone Set dialog box appears (Figure 84). 
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Figure 84 Import Zone Set dialog box 

3. Locate the folder that contains the exported zone set. 

4. Select the XML file and click Import. 

df NOTE: If the zone set name already exists in the zone set library, a warning message is displayed: 

Unable to import zoneset. The zoneset name already exists. Change the zone 
set name and try again. 

5. Click OK. 

Zoning administration 

This section describes the following zoning administrative tasks. Tasks that you can perform on 
zones and zone sets include: 

• Renaming a zone or zone set, page 1 35 

• Replacing zone members, page 1 35 

• Copying a zone set, page 1 36 

• Deleting a zone, page 1 36 

• Viewing zone and zone set properties, page 1 37 

• Finding members in a zone, page 137 

• Finding zones in a zone set, page 1 37 
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• Displaying zone members, page 1 37 

• Saving the active zone set to a zoning library, page 1 38 

• Comparing zone sets, page 1 38 

Renaming a zone or zone set 

To rename a zone or zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 177.) 
The Zoning dialog box appears (Figure 78). 

2. Right-click the zone or zone set that you want to rename and select Rename. 

3. Enter the new name. (See "Zoning naming conventions" on page 1 26.) 

4. Press Enter to save the new name. 

Replacing zone members 

You can replace zone members in one of two ways: 

• Select the replacement zone member from the Potential Zone Member list. 

• Specify the replacement member's domain/ port or WWN. 

Using the Potential Zone Members list 
To replace a zone member: 

1. Display the zone library. (See"Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Select the member you want to replace from the Potential Zone Members list. 

3. Click Find to find all instances of the member in the configured zones. 

4. Click <1 to the right of the Potential Zone Members list to remove the member from the zones. 

5. Select the replacement member from the Potential Zone Members list. 

6. Click _|_| to the right of the Potential Zone Members list to add the member to the zones. 

7. Click OK. 

Using the domain/ port or WWN 
To replace a zone member: 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Right-click the member you want to replace and select Replace, or right-click in the Zones 
area and select Replace All. 
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The Replace Zone Member dialog box appears (Figure 85). 
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Figure 85 Replace Zone Member dialog box 

3. Enter the domain and port IDs or the WWN of the replacement member. 

4. Click OK. 

Copying a zone set 

To copy a zone set: 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Right-click the zone set that you want to copy. 
• Select Duplicate to copy the zone set. 
The copied zone set appears. 

3. Optionally, enter a new name for the zone set. (See "Replacing zone members" on page 1 35.) 

4. Click OK. 

Deleting a zone 

1. Display the zone library. (See "Displaying the zone library" on page 177). 
The Zoning dialog box appears (Figure 78). 

2. Right-click the zone you want to delete and select Delete. 

Hf NOTE: The zone is deleted without confirmation. If you delete a zone accidentally, click Cancel 
instead of OK to restore it. 

3. Click OK. 

Deleting a zone set 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Right-click the zone set you want to delete and select Delete. 

Hf NOTE: The zone set is deleted without confirmation. If you delete a zone set accidentally, click 
Cancel instead of OK to restore it. 
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3. Click OK. 

Viewing zone and zone set properties 

You can view information for zones and zone sets, such as name; number of zones, zone sets, or 
zone members; number of unique zone members; and status. 

1. Display the zone library. (See "Displaying the zone library" on page 1 27). 
The Zoning dialog box appears (Figure 78). 

2. Right-click a zone or zone set and select Properties. 

3. Click Close when you have finished viewing the properties. 

Finding members in a zone 

1. Display the zone library. (See"Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Select a device or port from the Potential Zone Members list and click Find. 
All found members are highlighted in the Zones list. 

Finding zones in a zone set 

1. Display the zone library. (See "Displaying the zone library" on page 1 27.) 
The Zoning dialog box appears (Figure 78). 

2. Select a zone from the Zones list and click Find. 
All zones found are highlighted in the Zone Sets list. 

Displaying zone members 

1. Select View All > Levels > All Levels from the HAFM menu bar. 
All levels are displayed on the Product List. 

2. Expand a product on the Product List to display the ports. 

3. Right-click a port and select List Zone Members. 
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The List Zone Members dialog box appears (Figure 86). 




Figure 86 List Zone Members dialog box 
4. Click Close to close the dialog box. 



Saving the active zone set to a zoning library 



When you manage a switch's zone set through one appliance, and then import that switch into a 
new appliance, you must save the zone set on the new appliance, This allows pre-existing zoning 
information on the switch to be stored on the new appliance. 

1. Select Configure > Zoning from the HAFM menu bar. 
The Zoning dialog box appears (Figure 78 on page 1 27). 

2. Select a fabric from the Fabric list. 

3. Click the Active Zone Set tab. 

4. Select the active zone set and click Save As. 
The Save Active Zone Set As dialog box appears. 

5. Rename the active zone set and click OK. 

The switch's zoning information is imported to the new appliance. You can now manage zones 
and zone sets through the new appliance. 



To compare two zone sets: 

1. Select Configure > Zoning from the HAFM menu bar. 
The Zoning dialog box appears (Figure 78 on page 1 27.) 

2. Select a fabric from the Fabric list. 

3. Click the Activate Zone Set tab. 

4. Click Compare With. 
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The Select a Zone Set dialog box appears. 
5. Select a zone set and click OK. 
The comparison results are displayed. 
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8 SANtegrity Security Center 



This chapter provides instructions for using the SANtegrity Security Center. 

• Purpose of the Security Center, page 141 

• Accessing the Security Center, page 141 

• Displaying the Fabrics list, page 143 

• Using the Authentication table, page 144 

• Accessing SANtegrity Security Center tabs, page 145 

• Viewing the Security Log, page 165 



The Security Center is a tool for viewing and configuring your installation's Fibre Channel 
authentication parameters. The Security Center provides a single central User Interface for 
managing the authentication settings of all SANtegrity-capable switches and directors in the 
installation. The SANtegrity Security Center includes: 

The list of fabrics 

• Summaries of the security configuration for each SANtegrity-capable device in each fabric 

• Configuration tabs for updating each switch's SANtegrity authentication values. The tabs are 
each oriented around a specific authentication task. For example, there is a tab to define which 
users are allowed to sign on to the switch to perform management tasks, and which 
management interfaces are enabled; and there is a tab to define the IP addresses from which 
management requests may originate, and whether the switch or director will limit management 
requests based on originating IP address. 

• The ability to easily apply changes to all switches or directors in a fabric. This key feature allows 
you to define the authentication parameters for one switch, and, by a few simple additional 
clicks, propagate the changes to one or more additional switches in the fabric. Thus, the Security 
Administrator can view and manage security settings for entire fabrics at once. 

• A Security Log containing a record of all security-related configuration updates, as well as 
security-related events such as illegal login requests. 

The Security Center is designed to be a single point of control for the Security Administrator. 
Although the Element Manager has the ability to configure the SANtegrity parameters for a single 
switch, only the Security Center provides installation-wide Fibre Channel security configuration and 
monitoring. 



The SANtegrity Security Center feature requires a license key, and is not available unless the 
Security license key is installed on the HAFM appliance. The SANtegrity Security Center is accessed 
from the Security tab on the main window and displays Fabric information, Authentication 
information, Master Log, and Security Log. 



Purpose 




Accessing the Security Center 
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Access the SANtegrity Security Center by clicking the Security tab or F8 on the main window. In 
order to use the Security Center, the user must have Security Administrator privilege. If not, the 
Security tab is hidden. 

Following is additional information about the components of the Security window: 

• The upper left part of the Security window shows the Fabrics list. All discovered fabrics are listed 
by their WWNs with their operational status icons on the left side. 

• The upper right part of the Security window displays the main working area, where the security 
administrator configures the authentication security settings. The main working area is divided 
into two parts: 

• The upper part is the Authentication Product Configuration table, which contains a summary 
of security-related values for each switch in a fabric. 

• The lower part is a tabbed pane containing a set of five tabs for completing security 
configuration tasks. 

• The lower left part of the Security window displays the server Master Log and the lower right part 
of the window displays the Security Log. 

The Security tab and Security Log are only available to users with security administrator 
privileges. 

• Change the default size of the display by placing the cursor on the divider until a double arrow 
displays. Click and drag the adjoining divider to resize the window. You can also show or hide 
an area by clicking the left or right arrow on the divider. 

• On the tool bar the Display By option and the Search Box option are disabled. 
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[§f NOTE: SANtegrity Authentication can also be accessed from any SANtegrity-capable Element 
Manager Configure menu by selecting SANtegrity Authentication. Accessing SANtegrity 
Authentication from the Element Manager lets you manage only one device at a time. 
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Figure 87 Main window with Security tab 

playing the Fabrics list 

The Fabrics list displays all discovered fabrics listed by their WWNs with their operational status on 
the left side if the status is available. When a fabric is selected from the left side, all switches within 
the fabric are displayed in the top table. This includes devices not managed by this HAFM 
appliance and offline devices. 

Although all devices display, only HP products managed by the HAFM appliance can be 
configured. These products display with their corresponding product icon. These are the same icons 
shown on the topology map. 

If an HP product is not managed by the HAFM appliance, the product displays a generic icon. If the 
product is offline, a customized product icon displays with a unknown operations status icon. 
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[If NOTE: If a device is managed by the HAFM appliance, when the device displayed on the Security 
tab is offline or loses a MPI link, the previously discovered value may still display in the top table. If 
this switch is selected, a blank area displays in the bottom pane with an error message. 



Using the Authentication table 
Selecting a fabric 

When a fabric is selected from the left side, all switches within the fabric are displayed on the top 
table of the Authentication table. Note the following specifics: 

• Only HP products that are currently being managed by the HAFM appliance can be 
configured. These products are represented by their corresponding customized product icons on 
the topology map. These are the only products whose security settings can be discovered and 
displayed. 

• A generic icon is displayed for all products that are not managed by the HAFM appliance. 

• If a switch goes offline, then the switch does not display in the top table and a warning message 
indicates there are unapplied changes on the tab. If you click off the tab, all the changes are lost 
for that tab. 

• An offline switch is contained in its own fabric and works like a managed switch. The icon for 
the offline switch is the customized product icon. 

• If none of the discovered products is manageable when the Security tab is first accessed, a 
message displays indicating this device cannot be configured because it is not currently 
managed by this HAFM appliance. 

• If you select a switch and start to configure the settings, and then the switch goes offline or loses 
the MPI link, you can continue configuring the switch by clicking Yes in the displayed warning 
message. You can apply all changes to the offline switch and all changes are populated to the 
switch. Alternatively, you can wait until the switch is online and the changes made to the top 
table can be applied. 

• If the switch is manageable and you complete the configuration changes from the bottom tabs 
and apply them to the Authentication table, and then the switch loses manageability before you 
click Activate, a message indicates that you cannot apply the changes because the switch is not 
manageable. However, you can apply the changes when the switch is manageable again, as 
long as you do not exit the screen. 

Changing security data internally 

The Authentication table automatically refreshes to reflect the latest changes to the products listed. 
The changes include security-related or non-security data. With non-security data, the table refreshes 
and regular events are generated for the changes and logged in the Master Log. 

Changing security data externally 

When security data is changed by another interface such as HTTP or Telnet, the security 
administrator should be notified because the working data may be affected by the table's live 
update. 
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If the security settings for a switch or director are changed by another management interface, then 
the following occurs: 

• If the switch that was changed by another interface is not currently configured by your HAFM 
appliance user, the top table accepts the changes, and an event is generated in the Security 
Log. 

• If the changes made by another interface affect the switch whose security data is currently being 
modified by a security administrator, a message displays indicating the security settings have 
been changed by an external source. The message asks you if you want to load the new settings 
from the switch or keep your changes. 

• Click Load New Settings— The information appears in the display on the top table and 
configuration on the bottom tab update. All working data is overridden by the new data in 
the switch. 

• Click Keep Changes— The updates are made to the switch, but you may maintain the 
configuration both on the top table and bottom tab. If needed, these changes may be 
overridden with the current configuration. 

Accessing SANtegrity Security Center tabs 

There are five tabs in the Authentication section: 

• Users— Allows the security administrator to set up users accessing the switch from CLI and web 
interfaces. 

• Software— Allows the security administrator to set up software applications that can 
communicate with the switch through API, as well as OSMS authentication. 

• Device— Allows the security administrator to set device-to-device authentication parameters. The 
Device tab is PFE key-enabled. If a proper PFE key is not provided, the Device tab is not 
accessible. 

• IP Access Control List— Allows the security administrator to set up IP addresses that can 
manage the switch. 

• Radius Server— Allows the security administrator to set Radius server parameters that the 
switch can use to pass on the authentication information to the designated Radius servers. 

Using the Users tab 

The Users tab lets the security administrator set up role-based user access to the selected switch 
through other management interfaces, such as EWS or Telnet. 
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Figure 88 Main window with Security tab chosen 

If the check box for EWS or Telnet is not selected, then no user can log into the switch through this 
interface. When the interfaces are enabled, EWS and Telnet can be set to authenticate to a local 
database on the switch, a Radius server, or a local database then a Radius server. If the SSH check 
box is selected then all management data between the workstation and the switch through Telnet is 
encrypted using the SSH protocol. 

If Radius Only is selected from the drop-down list, your HAFM appliance checks the Radius 
information to see whether or not any Radius server has been specified. If not, the application 
prevents the user from selecting this option and a message displays. 

If the Radius server is already set, the security administrator is alerted that the user information on 
the Radius server needs to be entered manually, because that information cannot be populated 
automatically by the HAFM appliance. 

Assigning users to a switch 

For the user role, there are two options available from a drop-down list, Administrator and 
Operator. The ID of the user is Administrator and the password is password. The third and fourth 
column indicate whether a user has access to the switch through the EWS or Telnet interface, or 
through both of them. 
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A default user is set up in the switch user base. The ID of the user is Administrator and the password 
is password. There is one default user that displays in the table, with both Telnet and EWS check 
boxes selected. 

Adding a new user 

To add a new user, do the following: 

1. Click Add. 

The Add/Edit User dialog box displays. 

Add or Edit User 

User ID || | 
Password | j 
Retype | j 

| OK | Cancel | 

Figure 89 Add/Edit User dialog box 

2. Define all the fields. 

User ID must be unique. If you add an ID that exists in the system, it will be rejected. 
The maximum length of password is 24 characters. 

3. Click OK. 

4. Assign a role to a user to be either Administrator or Operator. 

By default, all new users are set up with an Administrator's privilege. This can be changed by 
clicking the drop-down list under the Role column and selecting another option. 

The security administrator can delete users from the switch user database. There must be at least one 
user with Administrator privilege for Telnet and EWS. A message displays if you try to delete the last 
user with Administrator privileges. 

If a user is removed from the table, the user cannot access the switch through the Telnet or EWS 
interface. The removed user who is currently accessing a live session with the switch can continue 
working on the switch until logging out. 

Adding a set of users to multiple switches 

The security administrator can add the same set of users on multiple switches by clicking Apply 
To. 



[if NOTE: This feature is not available from the Element Managers. 
To add the same set of users to multiple switches: 



HA-Fabric Manager user guide 147 



1. Click Apply To. 

The Apply to Other Products dialog box displays listing the qualified switches and directors. 



Apply to Other Products 



Select 


Node Name K 


Nickname 


|Model 


.Domain ID 


iFirmwaie , 


0 


^10OOO8OO88fa)2OBA 


Corel 


B140 


1 


06 £1 JOB 


e 


^lOOOOSfflBSffiGOSD 


Edgel 


3232 


2 


oc.oo.ca 


□ 


^1(B(B38(B86(E0EE 


Eiige2 


32' 6 


23 


07IJ0.C0 




^10000800E86020BC 


EJgs3 


1500 


16 


06B2JB 




9100Q038BB3E020BB 


Core2 


B0S4 


5 


06D2J0O 


t 


S|l(B(B800886™F 


Legecyl 


5000 


3 





Select All 



JnselectAII 





OK 


Cancel 

j 1 


■ 







Figure 90 Apply to Other Products dialog box 

To be listed on this dialog, the following must be met: 

• The switches and directors must be manageable. 

• The Element Manager must manage one of the following models: 

• A 16-port 1 gig or 2 gig Switch 

• A 32-port 1 gig or 2 gig Switch 

• A 64-port or 140-port Director 

• The firmware must be 7.0 or later. 

2. Click the check boxes next to the devices to which you want to apply the users. 

3. Click OK. 

Using the Security Change Confirmation and Status dialog box 

Clicking OK on the Apply to Other Products dialog box or clicking Apply from the Users tab, 
displays the Security Change Confirmation and Status dialog box. This dialog box is also a 
status-monitoring dialog box that lets you know if the changes were successful. 
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security Change -Confirmation and Status 



Please Note 

The following security changes are ready to be populated to the switch(es) below. 

Please review the changes carefully before you accept them. 

Click "Start" button to proceed, and click "Close" button to cancel the changes. 



User Name Gary Ussia 
Time |8, 2005 10:07:04 AM GMT-05:00 

Server HAFMSERVER86-16.-1 29.94.63 
Detailed Changes 



Click on a product and view detailed changes 



1 00u08uu88A07C6A 



No changes ... 



Description | User Name [Parameter [Old Value [New Value 



Figure 91 Security Change Confirmation and Status dialog box 

The Security Change Confirmation and Status dialog box includes the user ID who initiated the 
changes, the time that the changes were planned, the Server ID from which the changes are 
populated, and all the affected switches and directors. Server ID is identified by its server name plus 
IP address. 

The Detailed Changes table includes all the individual configurations that the security administrator 
made on the Users tab. The columns of this table vary depending on from which tab the security 
administrator is accessing the confirmation information. 

If there is only one product to which changes need to be applied, only that product is listed. The 
product ID is identified by its Node name. By default, this product is highlighted and selected. 

If you applied the same user settings to multiple products, the product list displays multiple product 
names that were selected from the Apply To dialog box. By default, the product that was selected 
from the top table for configuration is highlighted. The content of the Detailed Changes table 
changes as you click through different products from the product list. 

The differences between the to-be-populated settings and current settings on each individual product 
are displayed, because the Apply To dialog box takes changes made on user settings for one 
product, and generalizes them to multiple products whose user settings can be totally different. The 
new settings replace the existing settings on other products. 
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To thoroughly check the new changes, click different products on the product list and view detailed 
changes. 



pr NOTE: Populating user-related settings to multiple products causes the new settings to override the 
existing settings. 



Clicking Start causes the HAFM appliance to populate changes to the switch specified in the 
products list. The Close button is disabled during this process to prevent you from disrupting the 
process. Close is enabled after the process is complete or the process is aborted because of a 
product failure. 

The bottom Status window displays the status of each product. If all changes are successfully 
populated to a product, the status displays the product name and a message indicating success. If 
the switch loses manageability or connection, a message displays with an Error icon. The remaining 
changes continue to process. The security administrator can maintain the configuration data on the 
Users tab, fix the connection problems, and return to the either Apply or Apply To dialog box. 
Select the unfinished products and repeat the confirmation process. 

If there are no security settings being changed, Apply and Apply To can be selected. When this 
occurs, the Security Change Confirmation and Status dialog box displays with the Detailed 
Changes table and a message indicates that no changes were found. Clicking Start displays a 
Status message that indicates the security settings are identical and that there are no changes to 
apply. 

Using the Software tab 

The Software tab provides the ability to define software access to the switch through API and 
OSMS interface. Unlike Telnet and EWS interfaces, the API user uses the HAFM appliance name 
(which is the server name defined at installation) as the ID and CHAP secret as password. The 
OSMS interface is for software to manage the switch from in-band. The only information needed 
for OSMS interface is the OSMS key. 
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Figure 92 Main window 

Enabling API authentication 

If API authentication is enabled, the following guidelines must be followed: 

There must be a minimum of one entry in the Permitted Software field. If not, a warning 
message displays when Apply is clicked. 

The current HAFM appliance must be included. If not, the current appliance loses 
manageability and you are forced to use an alternate management interface to disable API 
authentication. If you click Apply or Apply To without including the appliance in the 
permitted list, a message displays indicating you must include the current HAFM appliance in 
the permitted software list before enabling API authentication. 

e The current HAFM appliance cannot be deleted. If you remove the current appliance with API 
authentication turned on, and Apply or Apply To is clicked, a message displays indicating 
the current server ID cannot be removed when API authentication is enabled. 

• Do not delete the last user in the database. If the last user is deleted in the database, a warning 
message displays indicating the last software ID can not be removed from this list when API 
authentication is enabled. 

For the Authentication Method, the following applies: 

* Use the Method drop-down menu to select Local Only, Radius Only, or Local then 

Radius. The default is Local Only. 
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• If you select Radius Only, the HAFM appliance checks to see whether a Radius server is 
specified on the Radius Servers tab. If not, the Radius Only and Radius then Local options are 
not available from the drop-down menu. 

• If one Radius server is set to Radius Only, the Radius then Local option is available. 

• The HAFM appliance cannot automatically populate API information to the Radius server so a 
message displays indicating you have set API Authentication Method to Radius Only and that if 
you have not properly defined the software on the Radius server, API authentication will fail and 
the connectivity between software and product will be broken. 

The ID and secret must be defined for the HAFM appliance so that: 

• After API authentication is enabled, the HAFM appliance is not locked. 

• If mutual authentication is required between software and switch, a software ID is needed. The 
HAFM appliance is given a default ID during installation. Accept the default or provide another 
ID name. The Software ID name must be unique. If the same ID is used, the latter is rejected and 
the name must be changed. 

Disabling API authentication on the switch 

If API authentication is not enabled on a switch, the HAFM appliance can manage the switch if an 
MPI link with the switch is established. If the HAFM appliance is not licensed with SANtegrity 
Security Center, launch the Element Manager to add this appliance to the permitted software list for 
the switch. 

Adding the current HAFM appliance to the Permitted Software list 

The Permitted Software list displays software IDs that are allowed to access the switch through API. 

1. To manage the switch, add the current HAFM appliance to the permitted list by selecting the 
check box Include Current Server. 

If the current appliance does not have a CHAP Secret defined, a message displays indicating 
you have not defined a CHAP secret for this appliance yet. 

If a CHAP Secret is defined, click OK to add the current HAFM appliance to the Permitted 
Software list. 

2. To define a CHAP Secret for the HAFM appliance, click OK to display the Server Properties 
dialog box. If you click Cancel, the Software tab displays with the check box not selected. The 
HAFM appliance cannot be added without the CHAP Secret defined. 

3. Define the CHAP secret, and click OK on the Server Properties dialog box to return to the 
Software tab. 

4. Click Apply or Apply To to populate the CHAP Secret and server ID to the selected switch or 
switches. When the current server ID is stored in the switch, the Include current server check box 
is disabled, but still selected. The check box can be enabled only if the current HAFM appliance 
is removed from the Permitted Software list. 

Removing the current HAFM appliance 

To remove the current HAFM appliance, you can do one of the following: 
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• When the server ID is defined only in the HAFM appliance and has not been added to the 
switch, the current appliance can be removed by not selecting the Include current server check 
box. If the current appliance is selected, Remove is disabled. 

• If the server ID and CHAP Secret have been added to the switch, highlight the current appliance, 
and click Remove. If the current appliance is removed from the Permitted Software list, the 
Include current server check box is enabled. 

Editing the CHAP Secret for the current HAFM appliance 
To edit the CHAP Secret of the current HAFM appliance: 

1. Select the current HAFM appliance and click Edit. 

A message displays indicating to use the Server Properties dialog box to edit the current 
appliance's properties. 

2. Click OK to display the Server Properties dialog box. 

3. Edit the server ID or CHAP secret. 

If the appliance is changed, a message displays indicating when you change the server ID, you 
must also update the authenticating switches, or this appliance becomes out-of-sync and the 
switches cannot be managed. 

4. Click OK to return to the Software tab. 
Adding an additional HAFM appliance 

1. To add another HAFM appliance to Permitted Software list, click Add. 
The Add or Edit Software ID and CHAP Secret dialog box displays. 



Add or Edit Software ID and CHAP Secret 



Add or Edit Software ID and CHAP Secret 
Software ID 



rnyserver 



CHAP Secret 



8C063567E38F5086EBD5F3703A97DEB6 



Retype Secret 8C063567E38F5086EBD5F3703A97DEB6 



Generate 



OK 


Cancel 





Figure 93 Add or Edit Software ID and CHAP Secret dialog box 

2. Enter a unique Software ID. 

3. Click OK. 

The Software tab displays with an asterisk next to the current server ID on the Permitted 
Software list. 

Editing the CHAP Secret for another HAFM appliance 

To edit the CHAP Secret for another HAFM appliance in the Permitted Software list: 
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1. Select the HAFM appliance and click Change. 

The Add or Edit Software ID and CHAP Secret dialog box displays. 

If you modify a CHAP Secret for a non-local server on the Software tab, a message displays 
indicating you are about to modify the Chap Secret of this HAFM appliance in the switch's 
local database. The message also says to check the Server Properties dialog box for this switch 
and make sure the secret is updated accordingly. If you fail to do so, this appliance may not be 
able to manage the products any more. 

2. Edit the CHAP Secret. 

3. Click OK to return to the Software tab. 

Removing another HAFM appliance 

Although you can remove software IDs from the Permitted Software list, you cannot remove the last 
entry in the list while the API authentication is enabled. 

Enabling OSMS authentication 

OSMS is a PFE key-dependent feature. If the license key is not installed, then OSMS authentication 
is not available. 

Applying changes and confirmation 
To apply the change: 

1. From the Software tab, click OK on the Apply or Apply To dialog box. 

The Security Change Confirmation and Status dialog box displays. This dialog box is similar to 
the dialog box that displays from the Users tab. The only difference is the Detailed Change 
table. This table displays the difference between the current settings of the Software tab and the 
to-be-populated new settings. The behavior of this dialog box is the same as the dialog box for 
the Users tab. 

2. Click Start. 

If there are no security settings being changed and you click Apply or Apply To, the To Security 
Change Confirmation and Status dialog box displays with a message indicating no changes were 
found. Click Start and a message displays in the Status window indicating the security settings are 
identical and that there are no changes to apply. 

Using the Devices tab 

The Devices tab defines what switches and directors are eligible to mutually authenticate with the 
highlighted switch on the top table. The features in the Devices tab can be configured only if the 
switch has the proper PFE key installed. If not, when you click the Devices tab, a message displays 
indicating the feature has not been installed. 
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Figure 94 Main window with Security tab, Authentication, Device tab 

To have two connected switches authenticate each other locally, each switch must have its own user 
ID, Node WWN, and CHAP secret, as well as the other switch's user ID and CHAP secret. The 
switch can store more IDs and CHAP secrets if the switch has multiple connections with other 
switches only. You can also store IDs and CHAP secrets of switches that have no physical 
connections with this switch. This is not recommended because accessing one switch provides 
access to all switches' CHAP secrets. 

If you choose to have two connected switches authenticate each other through Radius server only, 
all product IDs and CHAP secrets are stored on the Radius server and the product local database is 
not required to carry the same data. In this case, the HAFM appliance does not communicate with 
Radius server effectively. The Radius Only authentication method can cause more errors and 
performance problems. 

When the Radius Only option is selected, the HAFM appliance ensures that only the CHAP secret 
for the switch is defined and stored in the local database. If not, a message displays indicating you 
must type or generate a secret for the current switch before you enable E_port authentication. 

If the CHAP secret is defined for the current switch, when clicking Apply, a message displays 
indicating you have set E/N_port Authentication Method to Radius Only. If you have not properly 
defined the secrets for all participating devices on the Radius Server, E/N_port authentication fails 
and your fabric connectivity is broken. 
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Understanding the Devices tab display and default settings 
When you access the Devices tab, do the following: 

1. Ensure that the Node Name is already discovered and displayed in a uneditable text field. 

2. Define the CHAP secret for the selected switch using one of two ways: 

• Click Generate to automatically have a CHAP Secret generated and to have it retyped in 
the Retype Secret field. If a CHAP secret is already defined for this product, a message 
displays that asks if you want to modify the existing CHAP secret. 

Or 

• Type the CHAP Secret and retype the same CHAP secret in the Retype Secret field to 
make sure the second entry matches the first one. 

3. Click Edit Secret to display the Change Secret dialog box that lets you edit the switch CHAP 
Secret. If the switch CHAP Secret is already defined, no message displays. 

4. If the initial state of a fabric is not configured to enable device authentication, the Eport 
authentication check box is disabled. To enable, click the E-port check box. The E_port 
authentication check box is disabled. 

5. Click the drop-down list to the right of the check box and select Local Only, Radius then 
Local, or Radius Only. 

The default selection is Local Only. Local Only causes the switch to only check its local 
database to verify if the switch on the other end is allowed to communicate when authentication 
happens. 

6. If the initial state of a fabric is not configured to enable device authentication, the N port 
authentication check box is disabled. To enable, click the N-port check box. The N_port 
authentication check box is disabled. 

7. Click the drop-down list to the right of the check box and select Local Only, Radius then 
Local, or Radius Only. 

The default selection is Local Only. Local Only causes the switch to only check its local 
database to verify if the switch on the other end is allowed to communicate when authentication 
happens. 

8. Check the Port Authentication List table. Each table column can be sorted and the column 
position can adjusted. All the ports are sorted by port number and display in that order. 

9. Select a port on the switch to override the authentication settings for that port. Port settings 
include the following: 

• If a port is configured to be Force Enabled, the port participates in authenticating the other 
end of the link regardless of the authentication state set at the switch level. 

• If a port is configured to be Force Disabled, that port does not participate in authentication 
at any time. 

• If a port is specified as Switch default, this port abides by all authentication settings 
configured for this switch. All ports are set to this state at product initialization time. 

The HAFM appliance displays all the switches, directors, and end nodes connected to the 
highlighted switch in the Devices tab. This tracks the security settings on each switch port and the 
state of connected devices. This list can include: 
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• Non-SANtegrity II compatible switches 

• Non-manageable switches 

• Non-HP switches 

• J BOD 
HBA 

• Other storage devices 

When your HAFM appliance is installed with SANtegrity and you discover a secure or unsecure 
fabric, the E_port authentication is disabled, and the drop-down menus for port authentication 
display your HAFM appliance. If a device is SANtegrity capable, your HAFM appliance can 
discover its current security settings and display them on the table. If not, your HAFM appliance 
displays only a limited information about that device. 

The Authenticated Devices list displays a list of authenticated devices that are in the current switch 
local database. In this database, there are connected or detached devices. Devices listed in this 
table must have a CHAP secret. 

Add an attached or detached device from the left Port Authentication List table by selecting a device 
and clicking the right arrow button, double-clicking the device, or clicking Add. Change the CHAP 
secret of a device by selecting the device and clicking Edit. To remove devices from this list, select a 
device or multiple devices, and click Remove. 



|?f NOTE: If the device is involved with the authentication process and the device is removed, the 
connectivity breaks. 

Adding a detached switch 

To add a detached switch, do the following: 

1. Click Add. The Added Device dialog box displays. 

To add a device that is not discovered by the HAFM appliance, a device that is not physically 
connected, or a device that is discovered, but not directly attached to this current switch: 
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Add Device 



Add detached device credentials 



Node Name 
CHAP Secret 
Retype Secret 



Generate 



O Add discovered device credentials 



OK 



Cancel 



Figure 95 Add Device dialog box 

1. Type the Node Name. 

• If Node Name is already in the Authenticated Devices list or is invalid, the new entry is rejected. 

• If the Node Name is in the Port Authentication List as a connected device, the device can be 
transferred from the Port Authentication List to the Authenticated Devices list. 

• If the Node Name is not in the Authenticated Devices list, but is discovered in the fabric and has 
CHAP secret, a message displays. 

• If the Node Name is not in the Authenticated Devices list, but is discovered in the fabric and the 
CHAP secret is not known because the device is not manageable or is a HBA, a message 
displays. 

2. Click OK. 

The added devices display on the Authenticated Devices list in the order that the devices were 
added. 

3. To edit the CHAP secret for the device, select the device and click Edit. 

When editing the existing CHAP secret of a device, all other devices that participate in 
authentication with this device need to have the local database refreshed, or the connectivity is 
broken. 
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Populating a CHAP secret to a current switch 

1. Select a CHAP secret for the current switch. 

2. Click Apply to populate the CHAP secret in the current switch. 

Changing a CHAP secret for a switch 

1. To modify a pre-defined CHAP secret for the current switch, click Apply. 

A confirmation message displays that asks if you want to modify the CHAP secret. 

2. Click Yes to modify the CHAP secret of the current switch and populate the CHAP secret to all 
other connected and authenticating devices. 

Adding a connected device with CHAP secret to a switch 

1. Select a device in the Port Authentication table. 

2. Click the right arrow. 

The device is moved to the Authenticated Devices list. 

Adding a connected device without a CHAP secret to a switch 

1. Select a device in the Port Authenticated Devices table. 

2. Click the right arrow. 

The Add User dialog box displays. 

Changing a CHAP Secret for a connected device 

1. Select a connected device from the Authenticated Devices list and click Edit. 
The Change Secret dialog box displays 

2. Click OK. 

3. The CHAP secret for the device is changed inside the local database, and in the current switch's 
Authenticated Devices list. 

Removing a connected device from my switch 

1. Select a connected device from the Authenticated Devices list. 

2. Click Remove. 

Changing a CHAP secret for a detached device 

1. Select a device and click Edit. 
The Add User dialog box displays. 

2. Click OK and the CHAP secret for the device is updated in the current local database for the 
switch. This device is not actively authenticating with the current switch, so the CHAP secret 
needs to be changed for this device locally and for other affected devices. 

Removing detached device from a switch 

1. Select a detached device and click Remove. 

The detached device is not actively authenticating with the current switch, so it is removed. 
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Enabling or disabling E_port and N_port authentication 

1. Select or clear the check box for E_port or N_port authentication. 

The port authentication state overrides the E_port and N_port authentication at the switch level. 
Changing enable authentication method 

Select an option from the Enable Authentication Method drop-down list for E port or N_port. 

• If the Radius Only option is selected, and E_port or N_port authentication is enabled, the 
application checks to see if the Radius server settings on the Radius tab have been set. 

• If not, the Radius Only and Radius then Local options do not display on the drop-down list. 
Changing port authentication state for an authenticated device 

1. Select a device and choose a different port authentication state. 

If the device is already in the authenticated device list, changing the port authentication state 
can occur. 

Changing port authentication state for a non-authenticated device with or without a CHAP 
secret 

1. Select a device, and select Force Enabled or Switch Setting from the corresponding 
authentication state while the E_port authentication is checked. 

If the device has not been transferred to the Authenticated Devices list, Needed is displayed in 
the Secret column whether the device has a CHAP Secret or not. 

2. Continue configuring multiple port authentication states. 

3. Click Apply 

A message displays indicating the devices have not been put into the Authenticated Devices list 
and as a result the connectivity between the devices and the switch is broken. 

4. Select Yes and the authentication is enabled between the current switch and the connected 
devices with switch ports set to Enabled. 

Or 

Select No and return to the Devices tab where you can add the devices to the Authenticated 
Devices list. 

Changing port authentication state for a nonmember device (manageable) without CHAP 
Secret 

If the port authentication state is changed to Forced Enabled or Switch Setting from the 
corresponding authentication state while the E_port authentication is checked, the Secret column 
changes its display value from No to Needed. 

1. Double click the corresponding Secret column or select the device and click the right arrow 
button to display the Add User dialog box. 

2. Select the CHAP secret, and click OK. 

The corresponding Secret column displays Set. The device is added to the Authenticated Devices 
list. The secret is populated to both the device's local database and the current switch's 
Authenticatable list. 
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Changing the port authentication state for a nonmember device that is not managed 

1. Select the E_port authentication check box for a device that is not manageable. 

2. Change the port authentication state to Force Enabled or Switch Settings. 
The Secret column changes from No to Needed. 

3. Double-click the corresponding Secret column to display the Add User dialog box. 

4. Type the CHAP secret. 

5. Click OK. 

The Secret column for that device displays Set. The device is added to the Authenticated Devices 
list. The secret is populated to the current switch's Authenticated Devices list. 

6. Access the device that is not managed and populate the same Secret into the local database. 
Applying changes and confirmation 

1. Click Apply from the Devices tab. 

The Security Change Confirmation and Status dialog box displays. 

This dialog box is similar in behavior to the Security Change Confirmation and Status that 
displays from the Users tab. The only difference is in the Detailed Changes table. On the Devices 
tab there is no Apply To available, so there is always one product in the product list. This table 
displays the difference between the current settings of the Devices tab and to-be-populated new 
settings. 

2. Click Apply even if there are no security settings being changed. 

If there are no security settings being changed, the Security Change Confirmation and Status 
dialog box displays with the Detailed Changes table showing that No Changes were Found on 
the first row. 

3. Click Start and the status window displays a message indicating the security settings are 
identical and there are no changes to apply. 

IP Access Control List tab 

The switch IP ACL tab contains IP addresses for devices that are allowed to manage the switch. IP 
addresses that are not on this list cannot manage the switch from the IP management port. 
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Figure 96 Main window with Security tab, Authentication, IP ACL tab 

If the Enable IP Access Control List check box is selected, the restricted access to the follow IP 
addresses is enforced. If not checked, management interfaces can access the switch from any 
address. The check box is enabled only if at least one IP address is in the list. 

Adding a new IP address 

1. Click Add. 

The Add/Edit IP Address or Range dialog box displays. 

2. Enter an IP Address or an IP Address Range. 

The IP range is defined by a starting IP address and ending IP address. 

3. Click Apply. 

Editing one IP address or one range of IP addresses 

1. Click Change. 

The Add/Edit IP Address or Range dialog box displays. 

2. Change the IP address or IP Address Range. 

3. Click Apply. 
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[Sf NOTE: If multiple IP address or ranges are selected, Edit is disabled. 



Removing multiple IP addresses at one time 

After adding, changing or removing IP addresses, to set the IP Access Control List, perform one of 
the following: 

• Click Apply and the changes are reflected for that switch in the Product Configuration table. 

• Click Apply To and a dialog box with a list of switches displays. 

• Click Reset and all the changes are dropped and the settings revert to the values that were set 
before the changes. 

The IP address of the HAFM appliance is not a default included in this list. When accessing the IP 
ACL tab, the Enable IP ACL check box is not selected. You cannot remove the server IP address from 
the Permitted IP Addresses list while the Enable IP ACL check box is selected. To remove the server IP 
from the list, disable the IP ACL. 

Applying changes and confirmation 

1. Click Apply from the IP ACL tab. 

The Security Change Confirmation and Status dialog box displays. 

This dialog box is similar in behavior to the Security Change Confirmation and Status that 

displays from the Users tab. The only difference is in the Detailed Changes table. This table 

displays the difference between the current settings of IP ACL tab and to-be-populated new 

settings. 

2. Click Apply or Apply To even if there are no security settings being changed. 

If there are no security settings being changed, the Security Change Confirmation and Status 
dialog box displays with the Detailed Changes table showing that No Changes were Found on 
the first row. 

3. Click Start and the status window displays a message indicating the security settings are 
identical and there are no changes to apply. 

Radius server tab 

Use this tab to specify the Radius server for authentication purposes. 
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Figure 97 Main window with Security tab, Authentication, Radius Servers tab 

A maximum of three Radius servers can be set up per switch. The device that needs to authenticate 
by Radius server always display sat the top of the table. If the first device does not respond after a 
certain amount of time due to connection or other configuration problems, the next device is 
authenticated and so on. 

The Radius servers and Sequence table includes information about the following: 

• The Host Name can be an IP Address. 

The UDP Port displays the number that the device uses to contact the Radius server. The port 
number is 1812 by default. 

• The Time out(sec) displays the amount of time to wait for a response from the Radius server 
before retransmitting the packet. It may be 1 to 1 000; the default is 2 seconds. 

• The Retries column specifies the number of times a packet is sent to a Radius server if a response 
is not received before the timeout. After the retransmit limit is reached, the Gateway switches to 
the next server. The value may be 1 to 100; the default is 3 attempts. 

The Dead Time setting located below the Radius servers and Sequence table apply to all 
available Radius servers. If a Radius server does not respond to an authentication request, it can 
be marked as "dead" for a specified time interval. This can speed up authentication by 
eliminating timeouts and retransmissions. If no alternate Radius servers are available, which 
means that only one server is configured or that all servers are marked as dead, the dead time 
is ignored. The dead time may be 0 to 1440 minutes; the default is 0. 
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• Click Edit to display the Add/Edit Radius Server dialog box. Use this dialog box to define all 
the settings that display in the RADUIS Servers and Sequence table. 

• Select one or more Radius servers and click Clear to clear the settings. 

• Adjust the sequence of Radius servers by using the Move Up and Move Down buttons. 

• Click Reset to reverse the settings to the initial settings that displayed when the tab was first 
accessed. 

Applying changes and confirmation 

1. Click Apply from the Radius Servers tab. 

2. The Security Change Confirmation and Status dialog box displays. 

This dialog box is similar in behavior to the Security Change Confirmation and Status that 
displays from the Users tab. The only difference is in the Detailed Changes table. This table 
displays the difference between the current settings of the Radius Servers tab and the 
to-be-populated new settings. 

3. Click Apply or Apply To even if there are no security settings being changed. 

If there are no security settings being changed, the Security Change Confirmation and Status 
Servers dialog box displays with the Detailed Changes table showing that No Changes were 
Found on the first row. 

4. Click Start and the status window displays a message indicating the security settings are 
identical and there are no changes to apply. 

Viewing the Security Log 

You must log in as the Security Administrator or System Administrator to view the Security Log. The 
Security Log can be viewed from the following: 

• On the main window of the HAFM appliance, select the Security tab and the Security Log 
displays as a table at the bottom of the window. 

• On the main window of your HAFM appliance, select Monitor, Log, and Security Log and 

the Security Log dialog box displays. 

• On the main Element Manager window, select the Log menu and Security Log and the Security 
Log dialog box displays. 

The Security Log (Figure 98) displays security information. 
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Figure 98 Security Log 

• Severity— The severity level of the event: informational, warning, and fatal. 

• User— The user associated with the event. 

• Reason— The reason code for the failure. 

• Description— The security event category includes the description that lists more details of the 
event and the IP address of the product. 

• Date and Time— The date and time that the event occurred. The format is yyyy/ mm/dd 
hh:mm:ss:tt. The last two characters (hundredth of seconds) are needed due to a possible higher 
frequency rate of some of the advanced logs. 

• Count— The number of times that the same event occurs. 

• Category— The category. 

• IP— The IP address. 

• Role— The role of the user. 
Interface— The interface. 

Differences between the SANtegrity Security Center and the SANtegrity 
Authentication 

The SANtegrity Security Center for your HAFM appliance that manages the fabric is similar to the 
SANtegrity Authentication for the Element Manager that manages a single product. The following 
differences between the two occur because one manages the fabric while the other manages a 
single product. 

• The SANtegrity Security Center is accessed by a license key and the SANtegrity Authentication 
accessed on the Element Manager is not accessed by a license key. 

• The SANtegrity Security Center is accessed from a tab that is parallel to the View tab in the main 
window. The SANtegrity Authentication is accessed from the Configure menu. 
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• The SANtegrity Security Center displays a Product Configuration table that lists all discoverable 
products and their security settings. The SANtegrity Authentication display does not have this 
table. 

• The SANtegrity Security Center Users tab displays an Apply To button. The SANtegrity 
Authentication Users tab does not have this button. 

• The SANtegrity Security Center Software tab displays an Apply To button. The SANtegrity 
Authentication Software tab display does not have this button. 

• The SANtegrity Security Center Devices tab populates CHAP secrets to the local switch and the 
connected devices. The SANtegrity Authentication Devices tab populates CHAP secrets to the 
local switch. 

The SANtegrity Security Center IP ACL tab displays an Apply To button. The SANtegrity 
Authentication IP ACL tab display does not have this button. 

The SANtegrity security Center Radius tab displays an Apply To button. The SANtegrity 
Authentication Radius tab display does not have this button. 

• The SANtegrity Security Center Security Change Confirmation and Status tab displays multiple 
switches in addition to the local switches. The SANtegrity Authentication Security Change 
Confirmation and Status tab displays only the local switch. 
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A Configuring HAFM through a firewall 



Networks can use a virtual private network (VPN) or firewall to prohibit communication between 
servers and clients. This appendix provides optional procedures for configuring HAFM client and 
server applications to function across remote networks through a firewall. 

This appendix describes the following topics: 

• Polling mode, page 169 

• TCP port numbers, page 171 



Generally, the server calls the client when it has new data. If the client uses firewall technology, the 
server may be unable to reach the client. In this case, the HAFM application automatically detects 
the network configuration and runs the client in polling mode. 

When the client is running in polling mode, the server queues up the data and the client 
periodically (approximately every 5 or 10 seconds) checks in and retrieves the data. The original 
two-way communication is transformed into one-way client-controlled communication, allowing 
passage through firewalls. 



When a client attempts to log in to a server, the server typically calls back to verify communication. 
In a firewall situation, this call fails and the server then treats the client as a polling client. It may 
take up to 45 seconds for this call-back to fail. You can configure a polling parameter in client and 
server batch files to identify the client as a polling client. This causes the server to skip the call-back 
step and shortens the login time. 

Forcing a client to polling mode 

To force a client to be a polling client, add the -Dsmp. callback. passive parameter to the 
following files in the HAFM 8 .x\bin directory (typically in c : \Program Files\HAFM 
8 .x\bin): 

• Client portion of the HAFM_sc .bat file 

• HAFM_c .bat file 

The HAFM_sc .bat file starts both the client and server and is installed on a computers with the 
HAFM appliance software. The hafm_c .bat file starts the client only and is installed with the 
client software. 



This example shows the edited files with the additional parameter in bold. This parameter only 
affects the specified client. 



Polling mode 




Example: 
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[iT NOTE: This example illustrates the HAFM_c .bat file. The portion of this file starting with rem 
HAFM Client is also included in the HAFM_sc .bat file. Both files must be modified if they are 
installed on your computer. 



setlocal 
pushd %~dpO\ . . 
call bin\set_cp.bat 
rem HAFM Client 

start %JAVA_HOME%\bin\HAFMClient . exe -Xmx256m -Xminf .15 -Xmaxf.35 -classpath 
%CLASSPATH%-Dsun . j ava2d . noddraw=true -Dsmp . f abricPersistenceEnabled=true 
-Dsmp .Mp.max=2 56 -Dsmp .deployment . pref ix=Client/ -Dsmp. callback. passive 
-Dsmp . f lavor=%APP_FLAVOR% Client 

rem HAFM Client Debug Mode 

rem start %JAVA_HOME%\bin\HAFMClientD . exe -Xmx256m -Xminf. 15 -Xmaxf.35 

-classpath %CLASSPATH% -Dsun. java2d.noddraw=true 

-Dsmp . f abricPersistenceEnabled=true -Dsmp . Mp .max=2 56 

-Dsun . j ava2d . noddraw=true -Dsmp . f abricPersistenceEnabled=true 

-Dsmp . deployment .pref ix=Client/ -Dsmp . debug -Dsmp. callback. passive 

-Dsmp . f lavor=%APP_FLAVOR% Client 

popd 

endlocal 

Forcing all clients to polling mode 

To force all clients communicating with a server to be treated as polling clients (regardless of the 
parameters the clients launch with), add the -Dsmp. callback. passive parameter to the HAFM 
Server section of the HAFM_sc .bat file located in the HAFM 8 .x\bin directory (typically in 

c:\Program Files \HAFM 8.x\bin). 

The following example shows the edited files with the added parameter in bold. 

setlocal 
pushd %~dpO\ . . 
call bin\set_cp.bat 



rem HAFM Server 

start %JAVA_HOME%\bin\HAFMServer . exe -server -Xm512m 
-Xminf. 15 -Xmaxf.3 5 -classpath %CLASSPATH% 
-Dsmp . Mp .max=512 -Dsmp . autodiscovery= false 
-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server/ 
-Dsmp . zoning=legacy 

-Dsmp . zoning .wait . timeout=180000 -Dsmp . webserver -Dsmp. callback. passive 

-Dsmp . f lavor=%APP_FLAVOR% Server 

rem HAFM Server Debug Mode 

rem start %JAVA_HOME%\bin\HAFMServerD . exe -server 
-Xmx512m -Xminf. 15 -Xmaxf.35 -classpath 
%CLASSPATH% -Dsun. java2d.noddraw=true -Dsmp .Mp . max=512 
-Dsmp . autodiscovery=f alse 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server/ 
-Dsmp . zoning=legacy 
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-Dsmp . zoning .wait . timeout=180000 -Dsmp . debug 
-Dsmp . webserver -Dsmp . callback . passive 

-Dsmp . f lavor=%APP_FLAVOR% Server 



: end 
popd 
endlocal 

TCP port numbers 

This section provides information about configuring TCP port numbers for remote management 
interface (RMI) servers and registries to allow the HAFM client and server application to function 
across firewalls. 

HAFM function with RMI at TCP port level 

The HAFM appliance communicates with clients through the RMI server (Figure 99). This is a 
full-duplex function. However, the HAFM client must know the TCP/IP port number of the RMI server 
on the HAFM appliance before they can communicate. The RMI registry communicates this TCP port 
number to the HAFM client. The HAFM appliance obtains the TCP port number of the RMI Server on 
the Client during initial communications. 



HAFM appliance 



RMI server 



RMI registry 



HAFM client 



RMI server 



RMI servers's TCP/IP port # 



RMI registry 



RMI servers's TCP/IP port# 
Full-duplex communication 



Figure 99 HAFM appliance and client communications 

The TCP port numbers of the RMI server are randomly and automatically selected on both the HAFM 
appliance and client as a full-duplex function. Firewalls are configured to block all unknown 
incoming connections with no mapping of outgoing connections based on a socket part of TCP and 
IP. 

To work around this problem, administrators can configure the port numbers into appropriate batch 
files, and then configure the firewall to unblock the configured port numbers. The procedure that you 
follow depends on how the firewall is set up: 

• If the firewall prevents the client from connecting to arbitrary ports on the server, then perform the 
following procedures: 

• "Forcing the RMI registry to use a specific port" on page 1 72 
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"Forcing server and client to export port number" on page 1 73 



|?f NOTE: You must configure both the server and client export port numbers. 



If the firewall prevents the server from connecting to arbitrary ports on the client, then configure 
the export port of the client in "Forcing server and client to export port number" on page 1 73. 

Forcing the RMI registry to use a specific port 

To force the RMI registry to use a specific TCP port for an RMI server, configure the 

Dsmp. registry. port=XXXX parameter in the following files in the HAFM 8 . x\bin directory 

(typically in c : \Program Files\HAFM 8.x\bin): 

• The client and server portion of the HAFM_sc .bat file 

• HAFM_c .bat file (if installed) 

The HAFM_sc .bat file starts both the client and server and is installed on a computers with the 
HAFM appliance software. The hafm_c .bat file starts the client only and is installed with the 
client software. 

HAFM_sc.bat 

Place the parameter -Dsmp. registry. port=xxxx, where xxxx'ts any TCP port number not 
being used by another application after the %classpath% parameter. 

The following example shows the edited file with the added parameter in bold: 

setlocal 

pushd %~dpO\ . . 

call bin\set_cp.bat 



rem HAFM Server 

start %JAVA_HOME%\bin\HAFMServer . exe -server -Xmx512m -Xminf.15 -Xmaxf.35 

-classpath %CLASSPATH% -Dsmp .Mp .max=512 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi .test -Dsmp . deployment . pref ix= Server / -Dsmp . zoning= legacy 

-Dsmp . zoning . wait . timeout=180000 -Dsmp . webserver -Dsmp. registry .port =XXXX 

-Dsmp . f lavor=%APP_FLAVOR% Server 

rem HAFM Server Debug Mode 

rem start %JAVA_HOME%\bin\HAFMServerD . exe -server -Xmx512m -Xminf.15 
-Xmaxf.3 5 -classpath %CLASSPATH% 

-Dsmp.Mp.max=512 -Dsmp . autodiscovery=f alse -Dsmp .mpi . test 
-Dsmp . deployment . pref ix=Server / -Dsmp . zoning=legacy 
-Dsmp . zoning . wait . timeout=180000 -Dsmp. debug -Dsmp . webserver 
-Dsmp. registry. port=XXXX -Dsmp . flavor =%APP_FLAVOR% Server 

: client 

rem HAFM Client 

start %JAVA_HOME%\bin\HAFMClient . exe -Xmx256m -Xminf.15 -Xmaxf.35 -classpath 
%CLASSPATH% -Dsun . j ava2d . noddraw=true -Dsmp. f abricPersistenceEnabled=true 
-Dsmp .Mp.max=2 56 -Dsmp .deployment .pref ix=Client/ -Dsmp. registry. port=XXXX 
-Dsmp . f lavor=%APP_FLAVOR% Client 

rem HAFM Client Debug Mode 

rem start %JAVA_HOME%\bin\HAFMClientD . exe -Xmx256m -Xminf.15 -Xmaxf.35 
-classpath %CLASSPATH% -Dsun. java2d.noddraw=true 
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-Dsmp . f abricPersistenceEnabled=true -Dsmp . Mp .max=2 56 

-Dsmp . deployment . pref ix=Client/ -Dsmp . debug -Dsmp . registry .port=XXXX 

?Dsmp . f lavor=%APP_FLAVOR% Client 

: end 

popd 
endlocal 

HAFM_c.bat File 

The HAFM_c .bat file starts the Client only. Edit file to include the parameter 
-Dsmp . registry .port=xxxx, where xxxx is any TCP port number not being used by another 
application. You must place this parameter after the %classpath% parameter. The following 
example shows the edited file with the added parameters in bold: 

setlocal 
pushd %~dpO\ . . 
call bin\set_cp.bat 



rem HAFM Client 

start %JAVA_HOME%\bin\HAFMClient . exe -Xmx256m -Xminf.15 -Xmaxf.35 -Xincgc 
-classpath %CLASSPATH% -Dsmp .Mp .max=2 56 -Dsmp . deployment . pref ix=Client/ 
-Dsmp . flavor =HAFM Client 



rem HAFM Client Debug Mode 

rem start %JAVA_HOME%\bin\HAFMClientD . exe -Xmx256m -Xminf.15 -Xmaxf.35 
-Xincgc -classpath %CLASSPATH% -Dsmp.Mp.max=2 56 

-Dsmp . deployment .pref ix=Client/ -Dsmp . debug -Dsmp . registry .port=XXXX 

-Dsmp . f lavor=HAFM Client 

popd 
endlocal 

Forcing server and client to export port number 

To force the server and client to export a specific TCP port number for an RMI server: 

1. Configure the following parameters in the HAFM_sc .bat file: 
■Dsmp . server . export . port=XOX 

■Dsmp . client . export .port=rYTY" 

2. Configure the -Dsmp . client . export .port=YYYY parameter in the HAFM_c.bat file. 

These files are located in the HAFM 8 .x\bin directory (typically in c : \ Program Files \HAFM 
8 .x\bin): 

The HAFM_sc .bat file starts both the client and server and is installed on a computers with the 
HAFM appliance software. The hafm_c .bat file starts the client only and is installed with the 
client software. 
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[if NOTE: If the firewall prevents the server from connecting to arbitrary ports on the client, then just 
force the export port of the client (-Dsmp . client . export .port=YYYY). 



HAFM_sc.bat 

Place the parameter -Dsmp . server . export . port=XXXX in the server area of the file, and the 
parameter -Dsmp . client . export . port= YYYY, in the client area of the file, where xxxxand 
YYYY are any TCP port numbers not used by another application. Although the server port number 
xxxx could match the client port number yyyy, this is not necessary. Add the parameters after the 
%CLASSPATH% parameter. The following example shows the edited file with the added parameters 
in bold: 

setlocal 

pushd %~dpO\ . . 

call bin\set_cp.bat 



rem HAFM Server 

start %JAVA_HOME%\bin\HAFMServer.exe -server -Xmx512m -Xminf.15 -Xmaxf.35 

-classpath %CLASSPATH% -Dsmp .Mp .max=512 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server / -Dsmp . zoning=legacy 

-Dsmp . zoning .wait . timeout=180000 -Dsmp . webserver 

-Dsmp. server. export. port=.XXXX -Dsmp . f lavor=%APP_FLAVOR% Server 

rem HAFM Server Debug Mode 

rem start %JAVA_HOME%\bin\HAFMServerD . exe -server -Xmx512m -Xminf.15 
-Xmaxf.35 -classpath %CLASSPATH% -Dsmp . Mp . max=512 -Dsmp . autodiscovery=f alse 
-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server / -Dsmp . zoning=legacy 
-Dsmp . zoning .wait . timeout=180000 -Dsmp. debug -Dsmp . webserver 
-Dsmp. server. export. port=.XXXX -Dsmp . f lavor=%APP_FLAVOR% Server 

: client 

rem HAFM Client 

start %JAVA_HOME%\bin\HAFMClient . exe -Xmx256m -Xminf.15 -Xmaxf.35 -classpath 
%CLASSPATH% -Dsun. java2d.noddraw=true -Dsmp. f abricPersistenceEnabled=true 
-Dsmp . Mp . max=2 56 -Dsmp . deployment . pref ix=C lien t / 
-Dsmp. client. export. port = YYYY -Dsmp . f lavor=%APP_FLAVOR% Client 

rem HAFM Client Debug Mode 

rem start %JAVA_HOME%\bin\HAFMClientD . exe -Xmx256m -Xminf.15 -Xmaxf.35 
-classpath %CLASSPATH% -Dsun . j ava2d . noddraw=true 
-Dsmp . f abricPersistenceEnabled=true -Dsmp . Mp .max=2 56 

-Dsmp . deployment . pref ix=Client / -Dsmp . debug -Dsmp . client . export .port =YYYY 

-Dsmp . f lavor=%APP_FLAVOR% Client 

: end 
popd 
endlocal 

HAFM_c.bat 

HAFM_c .bat starts the Client only. HAFM_c .bat starts the Client only and is installed with the 
Client software. Edit the file to include the parameter -Dsmp . client . export . port=YYYY. Add 



174 Configuring HAFM through a firewall 



this parameter after the %classpath% parameter. The following example shows the edited file 
with the added parameters in bold: 

setlocal 
pushd %~dpO\ . . 
call bin\set_cp.bat 



rem HAFM Client 

start %JAVA_HOME%\bin\HAFMMClient . exe -Xmx256m -Xminf.15 -Xmaxf.35 -Xincgc 
-classpath %CLASSPATH% -Dsmp .Mp . max=2 56 -Dsmp . deployment . pref ix=Client/ 
-Dsmp . f lavor=HAFM Client 

rem HAFM Client Debug Mode 

rem start %JAVA_HOME%\bin\HAFMClientD . exe -Xmx256m -Xminf.15 -Xmaxf.35 
-Xincgc -classpath %CLASSPATH% -Dsmp .Mp .max=256 

-Dsmp . deployment . pref ix=Client / -Dsmp . debug -Dsmp . client . export . port = YYYY 

-Dsmp . f lavor=HAFM Client 

popd 
endlocal 
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B Troubleshooting 



This appendix provides troubleshooting information for the following topics: 

• Problems with discovery, page 1 77 

• Problems with products, page 1 79 

• Problems with addresses, page 1 79 

• Miscellaneous problems, page 1 80 

• Problems with zoning, page 1 82 

Problems with discovery 

Table 1 8 describes possible problems with discovery and suggested resolutions. 



Table 18 Discovery problems and resolutions 



Problem 


Resolution 


Discovery is turned off. 


Select Discover > On. 


Devices are not being 
discovered. 


Ensure that your SNMP communication 
parameters are set correctly in order to discover 
switches. 


Discovered devices are not 
being displayed. 


Specify each device in the Out-of-Band dialog 
box, either by the individual IP address or by 
subnet. 

1. Select Discover > Setup. 

2. Add, change, and remove IP addresses, as 
necessary. See "Configuring IP addresses and 
community strings" on page 63. 

3. Select IP addresses from the Available 
Addresses list and add them to the Selected 
Subnets or Selected Individual Addresses lists 
by clicking |> . If you add addresses to the 
Selected Subnets list, select a Method 
(Broadcast or Sweep). 

4. Click OK. 




Ensure that you've selected to view the fabric that 
includes the discovered devices. 




Ensure that only one copy of the application is 
being used to monitor and manage the same 
devices in a subnet. 
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Table 18 Discovery problems and resolutions (continued) 



Problem 


Resolution 


Broadcast request is blocked 
by routers. 


Resolution 1 : If you know the IP addresses, and 
they are not in the Available Addresses list: 

1. Select Discover > Setup. 

2. Click Add. 

3. Enter data in the dialog box. 

4. Click OK. 

5. Repeat steps step 1 through step 4 until all 
addresses are available. 

6. Select the IP addresses you would like to 
discover in the Available Addresses list. 

7. Click _[►] to move your choices to the Selected 
Individual Addresses list. 

8. Click OK. 

Resolution 2: If you know the IP addresses and 
the addresses are listed in the Available 
Addresses list: 

1. Select Discover > Setup. 

2. Select the IP addresses you would like to 
uiscover in ine MvunuDie Muuresses iist. 

3. Click j^j to move your choices to the Selected 

InniviHun AHHrp^p^ i^t 

II 1 \*i 1 V 1 v-l U \*i 1 / tUU 1 vOOVO 1 IO 1 • 

4. Click OK. 


Discovery time is excessive. 


n\ 1 1 c k i k a n i • ii I il 

Decrease the bNMr timeout to decrease the 
discovery time. 


Can t open an clement 
Manager for an HP device. 


ensure that only one copy ot the application is 
being used to monitor and manage the device. 


The symapi . jar file is not 
in the class path 


Verify that the symapi . jar file has been copied 
into HAFM's lib directory. 
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Problems with products 

Table 19 describes possible product problems and suggested resolutions. 



Table 19 Product problems and resolutions 



Problem 


Resolution 


HBAs not connected to SAN 


Check your physical cables and connectors. 


Switches not connected to 
Ethernet 


Check your physical cables and connectors. 


Switches not connected to 
SAN 


Check your physical cables and connectors. 


Cannot disable fabric 
binding while enterprise 
fabric mode is active 


Disable the Enterprise Fabric Mode through the 
Enterprise Fabric Mode dialog box before 
disabling fabric binding. 


ems with addresses 




Table 20 describes possible problems with addresses and suggested resolutions. 


Table 20 Address problems and resolutions 


Problem 


Resolution 


No subnets or addresses 
selected 


. Select Discover > Setup. 

2. Click on the subnet or individual address you 
would like to discover in the Available 
Addresses list. 

3. Click J^J to move your choice to the Selected 
Subnets list, or to the Selected Individual 
Addresses list. 

4. Click OK. 


Wrong IP addresses 
selected 


1. Select Discover > Setup. 

2. Verify that the IP addresses in the Selected 
Subnets and Selected Individual Addresses 
lists are the correct current addresses for the 
SAN. 

3. Click OK. 


Wrong community strings 
are selected 


1. Select Discover > Setup. 

2. Select an IP address. 

3. Click Change. 

4. Select the desired community strings. 

5. Click OK. 
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Miscellaneous problems 

Table 21 describes possible miscellaneous problems and suggested resolutions. 



Table 21 Miscellaneous problems and resolutions 



Problem 


Cause/ resolution 


Code Execution Error: Array 
InOex Uut-Ut-Dounas. 


Retry the command or action. If the problem 
persists, contact HP customer support. 


Code Execution Error: 
Internal Exception 


Retry the command or action. If the problem 
persists, contact HP customer support. 


Code Execution Error: 
Missing Property File. 


Retry the command or action. If the problem 
persists, contact HP customer support. 


Code Execution Error: 
Invalid Product Type. 


Retry the command or action. If the problem 
persists, contact HP customer support. 


The server doesn't start. 


Examine the server log 

(< Install_Home> \Server\ 
Universe_Home\TestUniverse\_Working 
\EventStorageProvider\event . log) for 

f~\ \ r~\ r^c^ \ r~ i nrr^rmntir^n 
UIUUI \ {Jo \ IL, lillUillKJHUil. 


Server to client 
communication is inhibited. 


The network may be utilizing virtual private 
network (VPN) or firewall technology. See 
Appendix A for more information. 


Data and settings are not 
imported during 
installation. 


Open an MS-DOS window and enter the 
following script at the command line: 

lnstall_Service <startstatus > <runnow>. 




The startstatus parameter is manual or 
auto 

and runnow parameter is true or false. 




Windows service does not 
display correctly in the 
Computer Management 
(Windows 2000) or Service 
Control Manager 
(Windows NT) window. 


You installed or uninstalled the Win32 service 
while the Computer Management or Service 
Control Manager window was open. Close the 
window and re-open it to see the changes. 


An error is displayed stating 
that the application failed to 
setup the 

server ini t . txt or 
.license file. 


Delete the 

<Install_Home> \Server\serverinit . tx 
t file or the 

<Install_Home> \ Server \Conf ig\ Other \ 
. license file and rerun the installer. 


The product does not install 
on a Windows system. 


Verify that the system has 1 00 MB available on 
the C drive. The program requires 1 00 MB for 
installation, but only 50 MB to run. 



1 80 Troubleshooting 



Table 21 Miscellaneous problems and resolutions (continued) 



Problem 


Cause/ resolution 


Mapping a loop to a hub 
causes the loop group and 
the outermost portion of the 
topology's background 
group color or layout format 
to revert to the default. 


Make the background and/or layout changes 
after mapping the loop to the hub. 


Receiving error 

Compatibility 
between < TARGET 
VERSION> and 
< CURRENT VERSION> is 
unknown . Do you want 
to continue? 


Firmware files are included in the upgrade 
process, but release rules are not. Since release 
rules are required when sending another firmware 
version to a switch, this error results. To fix this 
problem, add the latest firmware file to the 

J> l-l Tl • 1 1 1 .1 1 

tirmware library. 1 his also adds the new release 
rules and resolves the problem. 


An error occurs when trying 
to delete a nickname. 


Once assigned, a nickname cannot be deleted. 


The system reboots or is 
unable to gather SNMP 
information. 


Multiple SNMP calls are being sent to a device 
that can't handle the constant requests for 
information. To resolve this issue, verify that the 
devices you are discovering are not being 
discovered by another Server. Discovering 
devices using multiple Servers may result in errors. 
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Problems with zoning 

The following table lists some possible issues and recommended solutions for zoning errors. 
Table 22 Zoning problems and resolutions 



Problem 


Cause/ resolution 


Receiving zoning errors. 


Verify that you did not configure zoning on a 
non-principal switch. 


The application is not 
performing zoning discovery 
very often. 


Zoning discovery is performed once at startup, 
and then once every two hours during routine 
discovery. If the Zoning dialog box is open, 
zoning discovery is performed during every 
polling cycle. It continues to discover at the 
increased speed for 30 minutes before it returns 
to the default value. 


When activating a large zone 
set on a two-switch fabric on 
UNIX platforms, an error 
message is displayed stating 

Failed to perform the 
requested zoning 
action: Failed to zone 
due to exception 
COM . hp . haf mecc . Haf mUn 
availableException. 


Although the error message states that the 
requested zoning action failed, the zone set 
correctly activated. Wait for the next zoning 
polling to occur. 


Zoning activation message is 
displayed for a long time, but 
zone set is not activated. 


Telnet zoning can take a long time. To improve 
speed, open the Discover Setup dialog box and 
add the HAFM IP address for HP switches to the 
Selected Individual Addresses list. 


When opening the Zoning 
dialog box from a particular 
switch or fabric, the message 

Cannot zone the 
selected device or 
fabric is displayed. 


The application may have been unable to log in 
to the fabric due to another active session. 
Verify that there is not another active session. 

The application may not support zoning on any 
of the discovered products. 
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C Informational and error messages 

This appendix lists information and error messages that appear in pop-up message boxes from the 
HAFM application and the associated Element Managers. 

The first section of the appendix lists HAFM application messages. The second section lists Element 
Manager messages. The text of each message is followed by a description and recommended 
course of action. 



HA-Fabric Manager user guide 1 83 



HAFM Application Messages 

This section lists HAFM application information and error messages in alphabetical order. 
Table 23 HAFM Messages 



Message 


Description 


Action 


A zone must have at least 
one zone member. 


When creating a new 
zone, one or more zone 
members must be added. 


Add one or more zone members to 
the new zone using the Modify 
Zone dialog box. 


A zone set must have at 
least one zone. 


When creating a new 
zone set, one or more 
zones must be added. 


Add one or more zones to the new 
zone set using the Modify Zone 
dialog box. 


All alias, zone, and zone 
set names must be 
unique. 


When creating a new 
alias, zone, or zone set, 
the name must be unique. 


At the New Zone dialog box, 
choose a unique name for the new 
alias, zone, or zone set. 


All zone members are 
logged. 


Attempt was made to 
display all zone members 
not logged in using the 
Zone Set tab, but all 
members are currently 
logged in. 


Informational message. 


An HAFM application 
session is already active 
from this workstation. 


Only one instance of the 
HAFM application is 
allowed to be open per 
remote workstation. 


Close all but one of the HAFM 
application sessions. 


Are you sure you want to 
delete this network 
address? 


The currently-selected 
network address will be 
deleted. 


Click Yes to delete or No to 
cancel. 


Are you sure you want to 
delete this nickname? 


The selected nickname 
will be deleted from the 
list of nickname 
definitions. 


Click Yes to delete the nickname 
or No to cancel the operation. 


Are you sure you want to 
delete this product? 


The selected product will 
be deleted from the list of 
product definitions. 


Click Yes to delete the product or 
No to cancel the operation. 


Are you sure you want 
to delete this user? 


The selected user will 
be deleted from the list 
of user definitions. 


Click Yes to delete the user or 
No to cancel the operation. 


Are you sure you want 
to delete this zone? 


The selected zone will 
be deleted from the 
zone library. 


Click Yes to delete the zone or 
No to cancel the operation. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Are you sure you want to 
delete this zone set? 


The selected zone set will 
be deleted from the zone 

l-L 

library. 


Click Yes to delete the zone set or 
No to cancel the operation. 


Are you sure you want to 
overwrite this zone set? 


The selected zone set will 
be overwritten in the 

l-L 

zoning library. 


Click Yes to overwrite or No to 
cancel. 


Are you sure you want to 
remove all members from 
this zone? 


All members will be 
deleted from the selected 
zone. 


Click Yes to delete the members or 
No to cancel the operation. 


Cannot add a switch to a 
zone. 


The device that you are 
attempting to add to the 
zone is a switch, which 
cannot be added to a 
zone. 


Specify the port number or 
corresponding World Wide Name 
for the device you want to add to 
the zone. 


Cannot connect to 
management server. 


The HAFM application at 
a remote workstation 
could not connect to the 
HAFM appliance. 


Verify the HAFM appliance 
internet protocol (IP) address is 
valid. 


Cannot delete product. 


The selected product 
cannot be deleted. 


Verify the HAFM 
appliance-to-product link is up. 

If the link is up: 

• The HAFM appliance may 
be busy. 

• Another Element Manager 
instance may be open. 

• You may not have 
permission to delete the 
product. 


Cannot disable Fabric 
Binding while Enterprise 
Fabric Mode is active. 


You attempted to disable 
Fabric Binding through 
the Fabric Binding dialog 
box, but Enterprise Fabric 
Mode was enabled. 


Disable Enterprise Fabric Mode 
through the Enterprise Fabric 
Mode dialog box in the HAFM 
application before disabling 
Fabric Binding. 


Cannot display route. All 
switches in route must be 
managed by the same 
server. 


You cannot show the 
route between devices 
that are attached to 
switches or directors 
managed by a different 
HAFM appliance. 


Make sure devices named in Show 
Routes dialog box are attached to 
products managed by this HAFM 
appliance. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Cannot display route. All 
switches in route must 
support routing. 


You cannot show the 
route through a fabric 
that has switches or 
directors which do not 
support routing. 


The route must contain only Edge 
Switch 2/1 6s, Edge Switch 
2/32s, Director 2/64s, or Director 
2/ 140s. 


Cannot display route. 
Device is not a member 
of a zone in the active 
zone set. 


You cannot show the 
route for a device that is 
not a member of a zone 
in the active zone set. The 
source node that you 
have selected is not part 
of a zone in the active 
zone set. 


Enable the default zone or activate 
the zone for the device before 
attempting to show the route. 


Cannot display route on 
one switch fabric. 


You cannot show routes 
between end devices in a 
fabric when configuring 
Show Routes (Configure 
menu). 


Error displays when attemptina to 
show routes on a fabric with only 
one switch. Configure Show 
Routes on a multi-switch fabric. 


Cannot display route, 
error 9. 


An internal error has 
occurred while trying to 
view routes. 


Contact the next level of support to 
report the problem. 


Cannot display route. No 
active zone enabled. 


You cannot show the 
route through a fabric 
with no active zone. 


Enable the default zone or activate 
a zone set before attempting to 

L iL t 

snow the route. 


Cannot have spaces in 
field. 


Spaces are not allowed 
as part of the entry for 
this field. 


Delete spaces from the field entry. 


Cannot modify a zone set 
with an invalid name. 
Rename zone set and try 
again. 


A zone set must have a 
valid name to be 
modified. 


Assign a valid name to the zone 
set, then modify the name through 
the Modify Zone Set dialog box. 


Cannot modify a zone 
with an invalid name. 
Rename zone and try 
again. 


A zone must have a valid 
name to be modified. 


Assign a valid name to the zone, 
then modify the name through the 
Modify Zone Set dialog box. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Cannot modify product. 


The selected product 
cannot be modified. 


Verify the HAFM 
appliance-to-product link is up. If 
the link is up: 

• The HAFM appliance may 
be busy. 

• Another Element Manager 

i i 
instance may be open. 

• You may not have 
permission to modify the 
product. 


Cannot perform 
operation. Fabric is 
unknown. 


This message displays if 
no switches in the fabric 
are connected to the 
HAFM appliance. 


Ensure at least one fabric-attached 
switch or director has an Ethernet 
connection to the HAFM appliance 
and retry the operation. 


Cannot perform 
operation. The list of 
attached nodes is 
unavailable. 


This messaae displays 
when attached nodes are 
unavailable and you 
attempt to modify a zone 
or create a new zone. 


Verify an attached node is 
available and retry the operation. 


Cannot retrieve current 
SNMP configuration. 


The current SNMP 
configuration could not 
be retrieved. 


Try again. If the problem persists, 
contact the next level of support. 


Cannot save current 
SNMP configuration. 


The current SNMP 
configuration could not 
be saved. 


Try again. If the problem persists, 
contact the next level of support. 


Cannot set write 
authorization without 
defining a community 
name. 


An SNMP community 
name has not been 
configured. 


Enter a valid community name in 
the Configure SNMP dialog box. 


Cannot show zoning 
library. No fabric exists. 


You cannot show the 
zoning library if no fabric 
exists. You must have 
identified a switch or 
director to the HAFM 
application for a fabric to 
exist. 


Identify an existing switch or 
director to the HAFM application 
using the New Product dialog box. 


Click OK to remove all 
contents from log. 


This action deletes all 
contents from the selected 
log. 


Click OK to delete the log contents 
or Cancel to cancel the operation. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Connection to 
management server lost. 


The connection to the 
remote HAFM appliance 
has been lost. 


Log in to the HAFM appliance 
again through the HAFM Log In 
dialog box. 


Connection to 
management server lost. 
Click OK to exit 
application. 


The HAFM application at 
a remote workstation lost 
the network connection to 
the HAFM appliance. 


Re-start the HAFM application to 
connect to the HAFM appliance. 


Could not export log to 
file. 


A log file input/output 
(I/O) error occurred and 
the file could not be 
saved to the specified 
destination. The disk may 
be full or write protected. 


If the disk is full, use another disk. 
If the disk is write protected, 
change the write-protect properties 
or use another disk. 


Default zoning is not 
supported in Open Fabric 
Mode. 


A default zone cannot be 
enabled when the 
product is enabled for 
Open Fabric mode. 
Open Fabric mode does 
not support zone 
members defined by port 
numbers. 


Change the Interop Mode from 
Open Fabric to Homogeneous 
using the Configure Fabric 
Parameters dialog box. You can 
also redefine zone members by the 
device WWN. 


Device is not a member 
of a zone in the active 
zone set. 


The selected device is not 
a member of a zone in 
the active zone set and 
therefore cannot 
communicate with the 
other devices in the route. 


Enable the default zone or activate 
a zone set containing the member 
before attempting to show the 
route. 


Download complete. 
Click OK and start the 
HAFM. 


Download of HAFM and 
the Element Manager is 
complete. 


Start the HAFM application to 
continue. 


Duplicate community 
names require identical 
write authorizations. 


If configuring two 
communities with 
identical names, they 

i 1 L -J i' 1 

must also have identical 
write authorizations. 


Verify that both communities with 
the same name have the same 
write authorizations. 


Duplicate Fabric Name. 


The specified fabric name 
already exists. 


Choose another name for the 
fabric. 


Duplicate name in zoning 
configuration. All zone 
and zone set names must 
be unique. 


Every name in the zoning 
library must be unique. 


Modify (to make it unique) or 
delete the duplicate name. 



1 88 Informational and error messages 



Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Duplicate nickname in 
nickname configuration. 


Duplicate nicknames 
cannot be configured. 


Modify the selected nickname to 

i -i 
make it unique. 


Duplicate World Wide 
Name in nickname 
configuration. 


A World Wide Name 

can be associated with 

i - i 
only one nickname. 


Modify (to make it unique) or 
delete the selected World Wide 
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Name. 


Duplicate zone in zone 
set configuration. 


More than one instance 
of a zone is defined in a 
zone set. 


Delete one of the duplicate zones 
from the zone set. 


Duplicate zone member 
in zone configuration. 


More than one instance 
of a zone member is 
defined in a zone. 


Delete one of the duplicate zone 
members from the zone. 


Element Manager 
instance is currently 
open. 


A product cannot be 
deleted while an instance 
of the Element Manager 
is open for that product. 


Close the Element Manager, then 
delete the product. 


Enabling this zone set will 
replace the currently 
active zone set. Do you 
want to continue? 


Only one zone set can be 
active. By enabling the 
selected zone set, the 
current active zone set 
will be replaced. 


Click OK to continue or Cancel to 
end the operation. 


Error connecting to 
switch. 


While viewing routes, the 
HAFM appliance was 
unable to connect to the 
switch. The switch failed 
or the switch-to-HAFM 

appliance Ethernet link 

i -i j 
tailed. 


Try the operation again. If the 
problem persists, contact the next 
level of support. 


Error creating zone. 


The HAFM application 
encountered an internal 
error. 


Try the operation again. If the 

problem persists, contact the next 

iii i 
level ot support. 


Error creating zone set. 


The HAFM application 
encountered an internal 
error. 


Try the operation again. If the 

problem persists, contact the next 

iii i 
level ot support. 


Error deleting zone. 


The HAFM application 
encountered an internal 
error. 


Try the operation again. If the 
problem persists, contact the next 
level of support. 


Error deleting zone set. 


The HAFM application 
encountered an internal 
error. 


Try the operation again. If the 
problem persists, contact the next 
level of support. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Error reading log file. 


The HAFM application 

encountered an error 

while trying to read the 
i 

log. 


Try the operation again. If the 
problem persists, contact the next 
level of support. 


Error removing zone or 
zone member. 


The HAFM application 
encountered an internal 
error. 


Try the operation again. If the 
problem persists, contact the next 
level of support. 


Error transferring files 
< message >. 


An error occurred while 
transferring files from the 
PC hard drive to the 
HAFM application. The 
message varies, 
depending on the 
problem. 


Try the file transfer operation 
again. If the problem persists, 
contact the next level of support. 


Fabric Log will be lost 
once the fabric 
unpersists. Do you want 
to continue? 


When you unpersist a 
fabric, the corresponding 
fabric log is deleted. 


Click Yes to unpersist the fabric or 
No to cancel the operation. 


Fabric member could not 
be found. 


A fabric member does 
not exist when the 
application prepared to 
find a route, find a route 
node, or gather route 
information on that fabric 
member. 


Ensure the product is incorporated 
into the fabric and retry the 
operation. If the problem persists, 
contact the next level of support. 


Fabric not persisted. 


You attempted to refresh 
or clear the log, after a 
fabric was unpersisted. 
When you unpersist a 
fabric, the corresponding 
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fabric log is deleted. 


Click OK to continue. Ensure the 
fabric is persisted before 
attempting to refresh or clear the 
Fabric Log. 


Field cannot be blank. 


The data field requires an 
entry and cannot be left 

LI 1 

blank. 


Enter appropriate information in 
the data field. 


File transfer aborted. 


You aborted the file 
transfer process. 


Verify the file transfer is to be 
aborted, then click OK to 
continue. 


HAFM error <error 
number 1 through 8 >. 


The HAFM application 
encountered an internal 
error (1 through 8 
inclusive) and cannot 
continue operation. 


Contact the next level of support to 
report the problem. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Management server 
could not log you on. 
Verify your username and 
password. 


An incorrect username or 
password (both case 
sensitive) was used while 
attempting to log in to the 
HAFM application. 


Verify the username and password 
with the customer's network 
administrator and retry the 
operation. 


Management server is 
shutting down. 
Connection will be 
terminated. 


The HAFM application is 
closing and terminating 
communication with the 
attached product. 


Reboot the HAFM appliance. If the 

problem persists, contact the next 

iii i 
level ot support. 


Invalid character in field. 


An invalid character was 
entered in the data field. 


Remove invalid characters from the 
entry. 


Invalid name. 


One of the following 
invalid names was used: 
CON, AUX, COM1, 
COM2, COM3, COM4, 
COM5, COM6, COM7, 
COM8, COM9, LPT1, 
LPT2, LPT3, LPT4, LPT5, 
LPT6, LPT7, LPT8, LPT9, 
NUL, or PRN. 


Choose a valid name and retry the 
operation. 


Invalid network address. 


The IP address specified 
for the product is 
unknown to the domain 
name server (invalid). 


Verify and enter a valid product IP 
address. 


Invalid port number. 
Valid ports are 
(0-< nn >). 


You have specified an 
invalid port number. 


Specify a valid port number, in the 
range 0 to the maximum number 
of ports on the product minus 1 . 
For example, for a switch with 
32 ports, the valid port range is 
U-o I . 


Invalid product selection. 


At the New Product 
dialog box, an invalid 
product was selected. 


Choose a valid product and retry 
the operation. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Invalid request. 


Three conditions result in 
this message: 


Choose the action that is 
appropriate to the activity that 
caused the error: 




• You tried to add or 
modify a product 
from Product View 
and the network 
address is already 
in use. (Network 
addresses must be 
unique.) 

• You tried to create 
a new user with a 
username that 
already exists. (A 
username must be 
unique.) 

• You tried to delete 
the default 
Administrator user. 
(The default 
Administrator user 
cannot be deleted.) 


• Network address: Specify a 
unique network address for 
the product. 

• username: Specify a unique 
username for the new user 
ID. 

• Do not delete the default 
Administrator user. 


Invalid UDP port number. 


The specified user 
datagram protocol (UDP) 
port number is invalid. 
The number must be an 
integer from 1 through 
65535 inclusive. 


Verify and enter a valid UDP port 
number. 


Invalid World Wide 
Name. 


The specified World 
Wide Name format is 
invalid. The valid format 
is eight twodigit 
hexadecimal numbers 
separated by colons 
(xx:xx:xx:xx: 
xx:xx:xx:xx). 


Enter a World Wide Name using 
the correct format. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Invalid World Wide 
Name or nickname. 


The World Wide Name 
or nickname that you 
have specified is invalid. 
The valid format for the 
World Wide Name is 
eight twodigit 
hexadecimal numbers 
separated by colons 
(xx:xx:xx:xx:xx: 
xx:xx:xx). The valid 
format for a nickname is 
non blank characters, up 
to 32 characters. 


Try the operation again using a 
valid World Wide Name or 
nickname. 


Invalid World Wide 
Name. Valid WWN 
format is: xx:xx:xx:xx:xx: 
xx:xx:xx. 


The specified World 
Wide Name format is 
invalid. The valid format 
is eight twodigit 
hexadecimal numbers 
separated by colons 
(xx:xx:xx:xx: 
xx:xx:xx:xx). 


Retry the operation using a valid 
WWN or nickname. 


Invalid zone in zone set. 


The defined zone no 
longer exists and is 
invalid. 


Delete the invalid zone from the 
zone set. 


Limit exceeded. 


You cannot add a new 
product or user to HAFM 
application if the 
maximum number of that 
resource already exists 
on the system. 


Delete unneeded products or users 
from the system, before attempting 
to add any new ones. 


No address selected. 


You cannot complete the 
operation because an 
address has not been 
selected. 


Choose an address and retry the 
operation. 


No attached nodes 
selected. 


An operation was 
attempted without an 
attached node selected. 


Choose an attached node and try 
the operation again. 


No management server 
specified. 


An HAFM appliance is 
not defined to the HAFM 
application. 


At the HAFM 8 Log In dialog box, 
type an appliance name in the 
Server Name field and click 
Login. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


No nickname selected. 


No nickname was 
selected when the 
command was attempted. 


Choose a nickname and try again. 


No Element Managers 
installed. 


No director or switch 
Element Manager is 
installed on this 
workstation. 


Install the appropriate Element 
Manager to this workstation. 


No routing information 
available. 


No information is 

available for the route 

i i j 
selected. 


Choose a different route and try 
the operation again. 


No user selected. 


A user was not selected 
when the command was 
attempted. 


Choose a user and try again. 


No zone member 
selected. 


A zoning operation was 
attempted without a zone 
member selected. 


Choose a zone member and try 
the operation again. 


No zone selected. 


A zoning operation was 
attempted without a zone 
selected. 


Choose a zone and try the 
operation again. 


No zone selected or 
zone no longer exists. 


A zoning operation was 
attempted without a zone 
selected, or the zone 
selected no longer exists 
in the fabric. 


Choose a zone and try the 
operation again. 


No zone set active. 


A zone set cannot be 
deactivated if there are 
no active zones. 


Informational message only— no 
action is required. 


No zone set selected. 


A zoning operation was 
attempted without a zone 
set selected. 


Choose a zone set and try the 
operation again. 


No zone set selected or 
zone set no longer exists. 


A zoning operation was 
attempted without a zone 
set selected, or the zone 
set you selected no 
longer exists in the fabric. 


Choose a zone set and try the 
operation again. 


Only attached nodes can 
be displayed in this 
mode. 


You cannot display 
unused ports when 
adding ports by World 
Wide Name. 


Change the add criteria to Add by 
Port. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Password and 
confirmation don't match. 


Entries in the password 
field and confirmation 
password field do not 
match. The entries are 
case sensitive and must 
be the same. 


Enter the password and 
confirmation password again. 


Remote sessions are not 
allowed from this network 
address. 


Only IP addresses of 
remote workstations 
specified at the Remote 
Access dialog box are 
allowed to connect to the 
HAFM appliance. 


Consult with the customer's 
network administrator to determine 
if the IP address is to be configured 
for remote sessions. 


Remote session support 
has been disabled. 


The connection between 
the specified remote 
workstation and the 
HAFM appliance was 
disallowed. 


Consult with the customer's 
network administrator to determine 
if the workstation entry should be 
modified at the Remote Access 
dialog box. 


Resource is unavailable. 


The specified operation 
cannot be performed 
because the product is 
unavailable. 


Verify the HAFM 

appliance-to-product link is up. If 

the link is up, the HAFM appliance 

may be busy. Try the operation 
i i 

again later. 


Route data corrupted. 


The information for this 
route is corrupt. 


Try the operation again. If the 
problem persists, contact the next 
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level ot support. 


Route request timeout. 


The Show Route request 
timed out. 


Try the operation again. If the 
problem persists, contact the next 
level ot support. 


Routing is not supported 
by the switch. 


This switch or director 
does not support the 
Show Routes feature. 


Choose a different switch or 
director to show the route. 


SANtegrity Feature not 
installed. Please contact 
your sales representative. 


You selected Fabric 
Binding or Enterprise 
Fabric Mode from the 
Fabrics menu. These 
selections are not 
enabled because the 
optional SANtegrity 
binding feature is not 
installed. 


Install the SANtegrity Binding 
feature to use Fabric Binding or 
enable Enterprise Fabric Mode. 


Select alias to add to 
zone. 


An alias was not selected 
before clicking Add. 


Choose an alias before clicking 
Add 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


Selection is not a World 
Wide Name. 


The selection made is not 
a World Wide Name. 


Choose a valid World Wide 
Name before performing this 
operation. 


Server shutting down. 


The HAFM application is 
closing and terminating 
communication with the 
attached product. 


Reboot the HAFM appliance. If the 
problem persists, contact the next 
level of support. 


SNMP trap address not 
defined. 


If an SNMP community 
name is defined, a 
corresponding SNMP 
trap recipient address 
must also be defined. 


Enter a correspondina SNMP trap 
recipient address. 


Switch is not managed by 
HAFM. 


The selected switch or 
director is not managed 
by the HAFM 
application. 


Choose a different switch or 
director. 


The Administrator user 
cannot be deleted. 


The administrator user is 
permanent and cannot be 
deleted from the 
Configure Users dialog 
box. 


Informational message only — no 
action is required. 


The Domain ID was not 
accepted. The World 
Wide Name and Domain 
ID must be unique in the 
Fabric Membership List. 


You attempted to add a 
detached switch to the 
Fabric Membership List 
through the Fabric 
Binding option 
(SANteqrity Bindinq 
feature), but a switch 
already exists in the 
fabric with the same 
domain ID. 


Enter a unique domain ID for the 
switch in the Add Detached Switch 
dialog box. 


The management server 
is busy processing a 
request from another 
Element Manager. 


The HAFM appliance is 
processing a request from 
another instance of an 
Element Manager and 
cannot perform the 
requested operation. 


Wait until the process completes, 
then perform the operation aaain. 


The link to the managed 
product is not available. 


The Ethernet connection 
between the HAFM 
appliance and managed 
product is down or 
unavailable. 


Establish and verify the network 
connection. 
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Message 


Description 


Action 


The maximum number of 
aliases has already been 
configured. 


The maximum number of 
aliases allowed was 
reached. 


Delete an existing alias before 
adding a new alias. 


The maximum number of 
management server 
network addresses has 
already been configured. 


The number of HAFM 
appliance IP addressees 
that can be defined to the 
HAFM application has 
already been configured. 


Delete an existing IP address 
before adding a new address. 


The maximum number of 
members has already 
been configured. 


The maximum number of 
unique members is 4097. 
The maximum number of 
members is 81 92. 


Delete an existing zone member 
before adding a new zone 
member. 


The maximum number of 
nicknames has already 
been configured. 


The maximum number of 
nicknames that can be 
defined to the HAFM 
application was reached. 


Delete an existing nickname before 
adding a new nickname. 


The maximum number of 
open products has 
already been reached. 


The maximum number of 
open switches allowed 
was reached. 


Close an Element Manager session 
(existing open product) before 
opening a new session. 


The maximum number of 
products has already 
been configured. 


The number of managed 
HP switches (48) that can 
be defined to the HAFM 
application was reached. 


Delete an existing product before 
adding a new product. 


The maximum number of 
products of this type has 
already been configured. 


The number of managed 
HP switches of this type 
(48) that can be defined 
to the HAFM application 
was reached. 


Delete an existing product of this 
type before adding a new product. 


The maximum number of 
remote network 
addresses has already 
been configured. 


A maximum number of 
eight IP addresses for 
remote workstations can 
be configured at the 
Session Options dialog 
box. That number was 
reached. 


Delete an existing IP address 
before adding a new IP address. 


The maximum number of 
users has already been 
configured. 


The number of users (32) 
that can be defined to the 
HAFM application was 
reached. 


Delete an existing user before 
adding a new user. 
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Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


The maximum number of 
zones allowed has 
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already been configured. 


The maximum number of 
zones that can be 
detined was reached. 


Delete an existing zone before 
adding a new zone. 


The maximum number of 
zone sets has already 
been configured. 


The maximum number of 
zone sets that can be 
defined was reached. 


Delete an existing zone set before 
adding a new zone set. 


The maximum number of 
zones per zone set has 
already been configured. 


The maximum number of 
zones that can be 
defined in a zone set was 
reached. 


Delete an existing zone before 
adding a new zone to the zone 
set. 


The nickname does not 
exist. 


The entered nickname 
does not exist in the 
fabric. 


Configure the nickname to the 
appropriate product or select an 
existing nickname. 


The nickname is already 
assigned. Either use a 
different name or do not 
save the name as a 
nickname. 


The entered nickname 
already exists in the 
fabric. Each nickname 
must be unique. 


Define a different nickname. 


The software version on 
this management server is 
not compatible with the 
version on the remote 
management server. 


A second HAFM 
appliance (client) 
connecting to the HAFM 
appliance must be 
running the same 
software version to log in. 


Upgrade the software version on 
the downlevel HAFM appliance. 


The zoning library 
conversion must be 
completed before 
continuing. 


The zoning library 
conversion is incomplete 
and the requested 
operation cannot 
continue. 


Complete the zonina library 
conversion, then retry the 
operation. 


This fabric log is no 
longer valid because the 
fabric has been 
unpersisted. 


The selected fabric log is 
no longer available 
because the fabric has 
been unpersisted. 


To start a new log for the fabric, 
persist the fabric through the 
Persist Fabric dialog box. 


This network address has 
already been assigned. 


The specified IP address 
was assigned and 
configured. A unique 
address must be 
assigned. 


Consult with the customer's 
network administrator to determine 
a new IP address to be assigned 
and configured. 



198 Informational and error messages 



Table 23 HAFM Messages (continued) 



Message 


Description 


Action 


This product is not 
managed by this 
management server. 


The product selected is 
not managed by this 
HAFM appliance. 


Choose a product managed by 
this HAFM appliance or go to the 
HAFM appliance that manages the 
affected product. 


This switch is currently 
part of this fabric and 
cannot be removed from 
the Fabric Membership 
List. Isolate the switch 
from the fabric prior to 
removing it from the 
Fabric Membership List. 


You attempted to remove 
a switch from the Fabric 
Membership List using the 
Fabric Binding option, 
but the switch is still part 
of the fabric. 


Remove the switch from the fabric 
by setting the switch offline or 
blocking the E_Port where the 
switch is connected. 


This World Wide Name 
was not accepted. The 
World Wide Name and 
Domain ID must be 
unique in the Fabric 
Membership List. 


You attempted to add a 
detached switch to the 
Fabric Membership List 
through the Fabric 
Binding option 
(SANtegrity Binding 
feature), but an entry 
already exists in the 
Fabric Membership List 
with the same World 
Wide Name (WWN). 


Enter a unique World Wide Name 
for the switch in the Add Detached 
Switch dialog box. 


Too many members 
defined. 


The maximum number of 
zone members that can 
be defined was reached. 


Delete an existing zone member 
before adding a new zone 
member. 


You do not have a 
compatible version of the 
management server 
software. In order for the 
HAFM application to 
function properly, a 
compatible version must 
be installed on the client 
machine. Click OK to 
install a compatible 
version. 


The HAFM application 
version running on the 
HAFM appliance differs 
from the version running 
on the remote workstation 
(client). A compatible 
version must be 
downloaded from the 
HAFM appliance. 


Download a compatible version of 
the HAFM application to the 
remote workstation (client) using 
the Web install procedure. 


You do not have rights to 
perform this action. 


Configured user rights do 
not allow this operation 
to be performed. 


Verify user rights with the 
customer's network administrator 
and change as required using the 
Configure Users dialog box. 
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Message 


Description 


Action 


You must define an SMTP 
server address. 


An SMTP server address 
must be defined and 
configured for e-mail to 
be activated. 


Define the SMTP server address at 
the Configure E-Mail dialog box. 


You must define at least 
one E-mail address. 


At least one e-mail 
address must be defined 
and configured for e-mail 
to be activated. 


Define an e-mail address at the 
Configure E-Mail dialog box. 


You must define at least 
one remote network 
address. 


At least one IP address 
for a remote workstation 
must be configured for a 
remote session to be 
activated. 


Define an IP address for at least 
one remote workstation at the 
Remote Access dialog box. 


You must download the 
HAFM client via the web 
install. 


An attempt was made to 
download the HAFM 
application to a remote 
workstation (client) using 
an improper procedure. 


Download a compatible version of 
the HAFM application to the 
remote workstation (client) using 
the Web install procedure. 


Zones configured with 
port numbers are ignored 
in Open Fabric Mode. 


While in Open Fabric 
mode, zones configured 
using port numbers are 
enforced through World 
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Wide Names. 


Informational message only-no 
action is required. 


Zones must be defined 
before creating a zone 
set. 


You cannot create a zone 
set without any zones 
defined for HAFM. 


Define zones using the New Zone 
dialog box. 


Zoning by port number is 
ignored in Open Fabric 
Mode. 


While in Open Fabric 
mode, zones configured 
using port numbers are 
enforced through World 
Wide Names. 


Informational message only-no 
action is required. 


Zoning by port number is 
not supported in Open 
Fabric Mode. 


You cannot specify an 
item for zoning by port 
number if HAFM is in 
Open Fabric Mode. 


Either define zones by WWN of 
device or change to Homogeneous 
Fabric mode in the Configure 
Operation Mode dialog box of the 
Element Manager. 


Zoning name already 
exists. 


Duplicate zone names 
are not allowed in the 
zoning library. 


Modify (to make it unique) or 
delete the duplicate zone name. 
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Element Manager Messages 

This section lists Element Manager information and error messages in alphabetical order. 
Table 24 Element Manager Messages 



Message 


Description 


Action 


A Preferred Path already 
exists between this 
Source Port and this 
Destination Domain ID. 
Please re-configure the 
desired path. 


For any source port, only 
one path may be defined 
to each destination 
domain ID. 


On the Add/Change Preferred 
Path dialog box, change the 
preferred path. 


Activating this 
configuration will 
overwrite the current 
configuration. 


Confirmation to activate 
a new address 
configuration. 


Click Yes to confirm activating the 
new address configuration or No 
to cancel the operation. 


All configuration names 
must be unique. 


All address 

configurations must be 
saved with unique 
names. 


Save the configuration with a 
different name that is unique to all 
saved configurations. 


All FPM ports will be held 
inactive while the director 
is configured to 
2 Gb/sec speed. Do you 
want to continue? 


Occurs when FPM cards 
are installed in the 
director and director 
speed is being set to 
2 Gb/sec in the 
Configure Switch 
Parameters dialog box. 


Replace FPM cards with UPM 
cards (UPM cards operate at 1 
and 2 Gb/sec) or set the director 
speed to 1 Gb/sec. 


All port names must be 
unique. 


A duplicate Fibre 
Channel port name was 
configured. All port 
names must be unique. 


Reconfigure the Fibre Channel port 
with a unique name. 


All port names must be 
unique. 


A duplicate port name 
was entered. Every 
configured port name 
must be unique. 


Reconfigure the port with a unique 
name. 


An Element Manager 
instance is already open. 


Only one instance of the 
Element Manager can be 
open at one time. 


Close the open Element Manager 
so the desired instance of the 
Element Manager can be opened. 


Another Element 
Manager is currently 
performing a firmware 
install. 


Only one instance of the 
Element Manager can 
install a firmware version 
to the director at a time. 


Wait for the firmware installation 
process to complete and try the 
operation again. 



HA-Fabric Manager user guide 201 



Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Are you sure you want to 
delete firmware version? 


This message requests 
confirmation to delete a 
firmware version. 
Firmware library can 
store up to 8 firmware 
versions. 


Click Yes to delete the firmware 
version or No to abort the 
operation. 


Are you sure you want to 
delete this address 
configuration? 


Confirmation to delete 
the selected address 
configuration. 


Click Yes to confirm the deletion 
of the address configuration or No 
to cancel the operation. 


Are you sure you want to 
send firmware version? 


This message requests 
confirmation to send a 
firmware version from the 
HAFM appliance's 
firmware library to the 
director. Firmware library 
can store up to 8 
firmware versions. 


Click Yes to send the firmware 
version or No to abort the 
operation. 


Cannot change Port Type 
while Management Style 
is FICON without 
SANtegrity feature. 
Please contact your sales 
representative. 


Firmware is below the 
required level and you 
attempted to change a 
port type in the Configure 
Ports dialog box while 
FICON management 
style, but the optional 
SANtegrity Binding 
feature is not installed. 


Informational message. If the 
firmware is below the required 
level, install SANtegrity Binding 
before changing port types in the 
Configure Ports dialog box while 
in FICON management style. 


Cannot disable Switch 
Binding while Enterprise 
Fabric Mode is active 
and the switch is Online. 


You attempted to disable 
Switch Bindina throuah 
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the Switch Binding 
Change State dialog 
box, but Enterprise Fabric 
Mode is enabled. 


You must either disable Enterprise 
Fabric Mode using the Enterprise 
Fabric Mode dialog box in the 
HAFM application or set the switch 
offline before you can disable 
Switch Binding. 


Cannot disable Insistent 
Domain ID while Fabric 
Binding is active. 


You attempted to disable 
the Insistent Domain ID 
parameter through the 
Configure Switch 
Parameters dialog box, 
but Fabric Binding is 
enabled. 


Disable Fabric Binding through the 
Fabric Binding dialog box before 
disabling these parameters. 


Cannot enable 
beaconing on a failed 
FRU. 


Occurs when selecting 
Enable Beaconing option 
for a failed FRU. 


Replace FRU and enable 
beaconing again or enable 
beaconing on operating FRU. 
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Message 


Description 


Action 


Cannot enable 
beaconing while the 
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system light is on. 


Occurs when choosing 
Enable Beaconing option 
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tor a tailed FRU. 


Replace FRU and enable 
beaconing again or enable 
beaconing on an operating FRU. 


Cannot enable 
beaconing while the 
system error light is on. 


Beaconing cannot be 
enabled while the system 
error light is on. 


Select Clear System Error Light 

from Product menu to clear error 
light, then enable beaconing. 


Cannot enable Open 
Trunking while Enterprise 
Fabric Mode is active 
and the switch is offline. 


Enterprise Fabric mode is 
active and the switch or 
director is online and you 
attempted to enable 
Open Trunking. This 
message only displays if 
the optional Open 
Trunking feature is 
installed. 


Perform either of the following 
steps: 

• Disable Enterprise Fabric 
Mode option by selecting 
the appropriate fabric in 
the Fabric Tree portion of 
the HAFM Manager 
window (Fabrics tab) and 
then selecting Enterprise 
Fabric Mode from the 
Fabrics menu. When the 
Enterprise Fabric Mode 
dialog box displays, click 
Start and follow prompts 
to disable the feature. 

• Set the switch or director 
offline through the Set 
Online State dialog box. 
Display this dialog box by 
selecting Set Online 
State from the Element 
Manager Maintenance 
menu. 


Cannot have E-Ports if 
Management Style is 
FICON unless SANtegrity 
feature is installed. Please 
contact your sales 
representative. 


Firmware is below the 
required level and you 
attempted to change 
management style from 
Open Systems to FICON 
management style with 
E_Ports configured, but 
SANtegrity Binding is not 
installed. 


Informational message. If firmware 
is below the required level and you 
install SANtegrity Binding before 
changing to FICON management 
style, then E_Ports will remain as 
E_Ports when you change to 
FICON manaqement style. If 
SANtegrity Binding is not installed, 
setting a director to FICON 
management style will change all 
E_ports to G_Ports. 
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Message 


Description 


Action 


Cannot have spaces in 
field. 


Spaces are not allowed 
as part of the entry for 
this field. 


Delete spaces from the field entry. 


Cannot install firmware to 
a director with a failed 
CTP card. 


A firmware version 
cannot be installed on a 
director with a failed 
control processor (CTP) 
card. 


Replace the failed CTP card and 
retry the firmware installation. 


Cannot install firmware to 
a switch with a failed CTP 
card. 


Firmware cannot be 
installed on a switch with 
a defective CTP card. 


Note that the CTP card is not a 
FRU. If it fails, the switch must be 
replaced. After replacement, retry 
the firmware install to the switch. 


Cannot modify 
director/switch speed. 
Port speeds cannot be 
configured at a higher 
data rate than the 
director/switch speed. 


Port speeds cannot be 
configured at a higher 
data rate than the 
director speed. This 
message displays when 
you set director sped to 
1 GB/sec through the 
Configure Switch 
Parameters dialog box 
and at least one of the 
ports is running at 2 
Gb/sec. 


Either return the director speed to 
2 Gb/sec or configure all port 
data speeds to 1 Gb/sec through 
the Configure Ports dialog box. 


Cannot perform this 
operation while the 
switch is offline. 


This operation cannot 
take place while the 
director or switch is 
offline. 


Configure the director or switch 
offline through the Set Offline State 
dialog box and then retry the 
operation. 


Cannot retrieve current 
SNMP configuration. 


The director SNMP 
configuration cannot be 
retrieved by the Element 
Manager because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot retrieve 
diagnostics results. 


Director diagnostic results 
cannot be retrieved by 
the Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 
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Message 


Description 


Action 


Cannot retrieve 
information for port. 


Port information cannot 
be retrieved by the 
Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot retrieve port 
configuration. 


The port configuration 
cannot be retrieved by 
the Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot retrieve port 
statistics. 


Port statistics cannot be 
retrieved by the Element 
Manager because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot retrieve switch 
date and time. 


The director or switch 
date and time cannot be 
retrieved by the Element 
Manager because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot retrieve switch 
state. 


The director or switch 
state cannot be retrieved 
by the Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot run diagnostics 
on a port that is failed. 


Port diagnostics 
(loopback tests) cannot 
be performed on a port 
that has failed any 
previous diagnostic 
(power-on diagnostic, 
online diagnostic, or 
loopback test). The 
amber LED associated 
with the port illuminates 
to indicate the failed 
state. 


Reset the port and perform 
diagnostics again. 


Cannot run diagnostics 
on an active E-port. 


Port diagnostics cannot 
be performed on an 
active E-port. 


Run diagnostics on an E-port only 
when it is not active. 
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Message 


Description 


Action 


Cannot run diagnostics 
on a port that is not 
installed. 


Port diagnostics cannot 
be performed on a port 
card that is not installed. 


Run diagnostics only on a port that 
is installed. 


Cannot run diagnostics 
on a port card that is not 
installed. 


Port diagnostics 
(loopback tests) cannot 
be performed on a port 
that does not have a 
small form factor (SFF) 
optical transceiver 
installed. 


Install a transceiver in the port and 
perform diagnostics again. 


Cannot run diagnostics 
while a device is 
logged-in to the port. 


Port diagnostics (internal 
loopback test) cannot be 
performed on a port 
while an attached Fibre 
Channel device is logged 
in. 


Ensure the device is logged out 
and perform diagnostics again. 


Cannot run diagnostics 
while a device is 
logged-in to the port. 


A device is logged in to 
the port where a 
diagnostic test is 
attempted. 


Log out the device and run the 
diagnostic test again. 


Cannot save IPL 
configuration while 
active=saved is enabled. 


You cannot save the IPL 
file while the 
active=saved property is 
set. 


The FICON Management Server 
property, active=save, must be 
disabled for HAFM to save the IPL 
file. 


Cannot save port 
configuration. 


The port configuration 
cannot be saved at the 
Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot save SNMP 
configuration. 


The SNMP configuration 
cannot be saved at the 
Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot set all ports to 1 
Gb/sec due to speed 
restriction on some ports. 


Displays if you try to set 
ports to operate at 1 
Gb/sec data speed 
through the Configure 
Ports dialog box and 
some ports do not 
support speed 
configuration. 


Replace ports that do not support 
speed configuration with those that 
do support more than one 
configuration. 
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Message 


Description 


Action 


Cannot set all ports to 2 
Gb/sec due to speed 
restriction on some ports. 


Displays if you try to set 
ports to operate at 2 
Gb/sec data speed 
through the Configure 
Ports dialog box and 
some ports do not 
support speed 
configuration. 


Replace ports that do not support 
speed configuration with those that 
do support more than one 
configuration. 


Cannot set all ports to 
Negotiate due to port 
speed restriction on some 
ports. 


Displays if you try to set 
all ports to Negotiate 
through the Configure 
Ports dialog box and 
some ports do not 
support speed 
configuration. 


Replace ports that do not support 
speed configuration with those that 
do support more than one speed 
configuration. 


Cannot set Fibre Channel 
parameters. 


Fibre Channel 
parameters for the 
director cannot be set at 
the Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot set switch date 
and time. 


The switch date and time 
cannot be set at the 
Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot set switch state. 


The director or switch 
state cannot be set at the 
Element Manager 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot set write 
authorization without 
defining a community 
name. 


A community name was 
not defined in the 
Configure SNMP dialog 
box for the write 
authorization selected. 


Provide a name in the Name field 
where write authorization is 
checked. 


Cannot start data 
collection. 


The data collection 
procedure cannot be 
started by the Element 
Manager because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 
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Message 


Description 


Action 


Cannot start firmware 
install while CTP 
synchronization is in 
progress. 


The director's CTP cards 
are synchronizing and 
firmware cannot be 
installed until 
synchronization is 
complete. 


Install the firmware after CTP card 
synchronization completes. 


Cannot start port 
diagnostics. 


Port diagnostics cannot 
be started at the Element 
Manager because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Cannot swap an 
uninstalled port. 


A port swap cannot be 

performed when the port 
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card is not installed. 


Perform a swap only on a port that 
is installed. 


Click OK to remove all 
contents from log. 


This action deletes all 
contents from the selected 
log. 


Click OK to delete the log contents 
or click Cancel to cancel the 
operation. 


Connection to 
management server lost. 

Click OK to exit 

i* i* 
application. 


The HAFM application at 
a remote workstation lost 
the network connection to 
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the HArM appliance. 


Start the HAFM application to 
connect to the HAFM appliance. 


Continuing may overwrite 
host programming. 
Continue? 


Configurations sent from 
the host may be 
overwritten by HAFM. 


Continuing will activate the current 
configuration, which may have 
been configured by a FICON host. 


Could not export log to 
file. 


A log file I/O error 
occurred and the file 
could not be saved to the 
specified destination. The 
disk may be full or write 
protected. 


Ensure file name and drive are 
correct. 


Could not find firmware 
file. 


Firmware file selected 
was not found in the FTP 
directory. Or, the 
selected file is not a 
firmware file. 


Ensure file name and directory are 
correct. Or, obtain a valid 
firmware file from your service 
representative. 


Could not remove dump 
files from server. 


Dump files could not be 
deleted from the HAFM 
appliance because the 
link may be down, or the 
HAFM appliance or 
Element Manager is 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 
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Message 


Description 


Action 


Could not stop port 
diagnostics. 


Port diagnostics could not 
be stopped by the 
Element Manaaer 
because the Ethernet link 
is down or busy, or 
because the director is 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Could not write firmware 
to flash. 


A firmware version could 
not be written from the 
HAFM appliance to 
FLASH memory 


Retry the operation again. If the 
condition persists, contact the next 
level of support. 


Control Unit Port (CUP) 
name and port name are 
identical (FICON ONLY). 


Within the address 
configuration, one or 
more of the port names 
are the same as the CUP 
name. 


Make sure all names are unique 
for the ports and CUP name. 


Date entered is invalid. 


The date is entered 
incorrectly in the 
Configure Date and Time 
dialog box. Individual 
field entries may be 
correct, but the overall 
date is invalid (for 
example, a day entry of 
31 for a 30-day month). 


Verify each entry is valid and 
consistent. 


Device applications 
should be terminated 
before starting 
diagnostics. Press NEXT 
to continue. 


Port diagnostics 
(loopback tests) cannot 
be performed on a port 
while an attached device 
application is running. 


Terminate the device application 
and perform diagnostics again. 


[device WWN] cannot 
be removed from the 
Switch Membership List 
while participating in 
Switch Binding. The 
device must be isolated 
from the switch, or Switch 
Binding deactivated 
before it can be removed. 


You attempted to remove 
a device WWN from the 
Switch Membership List 
(SANtegrity Binding 
feature) while Switch 
Binding is enabled. 


Remove the device from the switch 
by blocking the port, setting the 
switch offline, or disabling Switch 
Binding through the Switch Binding 
Change State dialog box before 
removing devices from the Switch 
Membership List. 
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Message 


Description 


Action 


Director clock alert mode 
must be cleared before 
enabling period 
synchronization. 


Clock alert mode is 
enabled through the 
Configure FICON 
Management Server 
dialog box and you 
attempted to enable 
Periodic Date/Time 
Synchronization through 
the Configure Date and 
Time dialog box. 


Disable clock alert mode through 
the Configure FICON 
Management Server dialog box. 


Director must be offline to 
configure. 


Clock alert mode is 
enabled through the 
Configure FICON 
Management Server 
dialog box and you 
attempted to enable 
Periodic Date/Time 
Synchronization through 
the Configure Date and 
Time dialog box. 


Disable clock alert mode through 
the Configure FICON 
Management Server dialog box. 


Disabling Insistent 
Domain ID will disable 
Fabric Binding. Do you 
want to continue? 


Fabric Binding is enabled 
through HAFM and you 
attempted to disable 
Insistent Domain ID in the 
Configure Switch 
Parameters dialog box. 


Click Yes if you want to continue 
and disable Fabric Binding. 


Disabling Insistent 
Domain ID will disable 
Fabric Binding. Do you 
want to continue? 


Fabric Binding is enabled 
through the HAFM and 
user attempted to disable 
Insistent Domain ID in the 
Configure Switch 
Parameters dialog box. 


Click Yes if you want to continue 
and disable Fabric Binding. 


Disabling Switch Binding 
will disable Enterprise 
Fabric Mode. Do you 
want to continue? 


You attempted to disable 
Switch Binding through 
the Switch Binding State 
Change dialog box, but 
Enterprise Fabric Mode is 
enabled. 


Disable Enterprise Fabric Mode 
through the Enterprise Fabric 
Mode dialog box before disabling 
Switch Binding. 


Do you want to continue 
with IPL? 


This message requests 
confirmation to initial 
program load (IPL) the 
director. 


Click Yes to IPL the director or 
Cancel to cancel the operation. 
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Message 


Description 


Action 


Domain IDs must be in 
the range of 1 to 31 . 


Domain IDs entered in the 
Configure Preferred Paths 
dialog box must fall in a 
specific range. 


In the Configure Preferred Paths 
dialog box, change the number in 
the Destination Domain ID field to 
a number between 1 and 31, 
inclusive. 


Duplicate Community 
names require identical 
write authorizations. 


Duplicate community 
names are entered at the 
Configure SNMP dialog 
box, and have different 
write authorizations. 


Delete the duplicate community 
name or make the write 
authorizations consistent. 


Element Manager error 
<number>. 


The Element Manager 
encountered an internal 
error and cannot 
continue. 


Contact the next level of support to 
report the problem. 


Element Manager 
instance is currently 
open. 


A Element Manager 
window is currently open. 


Informational message only. 


Enterprise Fabric Mode 
will be disabled if any of 
the following parameters 
are disabled: Insistent 
Domain ID, Rerouting 
Delay, Domain RSCNs. 
Do you want to continue? 


You attempted to disable 
these parameters in the 
Configure Switch 
Parameters dialog box 
while the switch was 
online, but Enterprise 
Fabric Mode (SANtegrity 
Binding feature) is 
enabled. 


Click Yes if you want to continue, 
and disable Enterprise Fabric 
Mode. 


Error retrieving port 
information. 


An error occurred at the 
Element Manager while 
retrieving port 
information because the 
Ethernet link is down or 
busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Error retrieving port 
statistics. 


An error occurred at the 
Element Manager while 
retrieving port statistics 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Error stopping port 
diagnostics. 


An error occurred at the 
Element Manager while 
attempting to stop port 
diagnostics from running 
because the Ethernet link 
is down or busy. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 
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Message 


Description 


Action 


Error transferring files 
< message >. 


An error occurred while 
transferring files from the 
PC hard drive to the 
Element Manager. The 
message varies, 
depending on the 
problem. 


Try the file transfer operation 
again. If the problem persists, 
contact the next level of support. 


Feature not supported. 
The 'product name' must 
be running version 
05.00.00 or higher. 


The firmware version on 
the hardware product 
(switch or director) is 
lower than 05.00.00. 
This message only 
displays if the optional 

Open Trunking feature is 

i ii i 
installed. 


Install firmware version 5.00.00 or 
higher on the hardware product. 


Field cannot be blank. 


The data field requires an 
entry and cannot be left 
blank. 


Enter appropriate information in 
the Data field. 


Field has exceeded 
maximum number of 
characters. 


The maximum number of 
data entry characters 
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allowed in the tield was 
exceeded. 


Enter the information using the 
prescribed number of characters. 


File transfer aborted. 


You aborted the file 
transfer process. 


Information message only. 


File transfer is in 
progress. 


A firmware file is being 
transferred from the 
HAFM appliance hard 
drive, or a data collection 
file is being transferred to 
a CD. 


Informational message only— no 
action is required. 


Firmware download 
timed out. 


The director or switch did 
not respond in the time 
allowed. The status of the 
firmware install operation 
is unknown. 


Retry the operation. If the problem 
persists, contact the next level of 
support. 


Firmware file I/O error. 


A firmware download 
operation aborted 
because a file I/O error 
occurred. 


Retry the operation. If the problem 
persists, contact the next level of 
support. 
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Message 


Description 


Action 


Firmware file not found. 


The firmware version is 
not installed (or was 
deleted) from the 
firmware library at the 
HAFM appliance. 


Add the firmware version to the 
library and retry the operation. 


Incompatible 
configuration between 
management style and 
management server. 


If the Firmware is below 
the required level, only 
FICON management 
style is allowed if the 
FICON Manaaement 
Server feature is enabled. 
You attempted to enable 
Open Systems 
management style. 


Disable FICON Management 
Server, enable the Open Systems 
Management Server, or enable the 
Open Systems management style. 


Incorrect product type. 


When configuring a new 
product through the New 
Product dialog box, an 
incorrect product was 
specified. 


Choose the correct product type 
for the product with the network 
address. 


Installing this feature key, 
while online, will cause 
an IPL operation on the 
switch and a momentary 
loss of LAN connection. 
This operation is 
nondisruptive to the Fibre 
Channel traffic. Do you 
wish to continue installing 
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this feature key? 


If the switch is online, 
installing the new feature 
key will cause an internal 
program load (IPL). The 
LAN connection to the 
HAFM appliance will be 
lost momentarily, but 
Fibre Channel traffic will 
not be affected. 


Click Yes to install the feature key 
or No to not install. 


Internal file transfer error 
received trom director. 


The director or switch 
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detected an internal tile 
transfer error. 


Retry the operation. If the problem 
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persists, contact the next level ot 
support. 


Invalid character in field. 


An invalid character was 
entered in the Data field. 


Remove invalid characters from the 
entry. 


Invalid configuration 
name. 


Attempted to save an 
address configuration 
name with an invalid 
name. 


Use up to 24 alphanumeric 
characters, including spaces, 
hyphens, and underscores. 


Invalid feature key. 


The feature key was not 
recognized. 


Re-enter the feature key. Ensure 
that you type each character in the 
correct case (upper or lower), 
include the dashes, and do not 
add any spaces at the end. 
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Message 


Description 


Action 


Invalid firmware file. 


The file selected for 
firmware download is not 
a firmware version file. 


Choose the correct firmware 
version file and retry the operation. 


Invalid management 
server address. 


The IP address specified 
for the HAFM appliance 
is unknown to the domain 
name server (invalid). 


Verify and enter a valid HAFM 
appliance IP address. 


Invalid network address. 


The IP address specified 
for the product is 
unknown to the domain 
name server (invalid). 


Verify and enter a valid product IP 
address. 


Invalid port address. 


Invalid port address has 
been entered. 


Verify port address through the 
Configure Addresses-'Active" 
dialog box (FICON management 
style only) and re-enter. 


Invalid port number. 


The port number must be 
within a range of ports 
for the specific director or 
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switch model. 


Enter a port number within the 
correct range. 


Invalid port swap. 


Port swap selection is not 
allowed. 


Ensure that each port selected for 

swap has not been previously 
i 

swapped. 


Invalid response received 
from switch. 


An error occurred at the 
switch during a firmware 
download operation. 


Retry the firmware download 
operation. If the problem persists, 
contact the next level of support. 


Invalid response received 
from director. 


An error occurred at the 
director during a 
firmware download 
operation. 


Retry the firmware download 
operation. If the problem persists, 
contact the next level of support. 


Invalid serial number for 
this feature key. 


The serial number and 
the feature key did not 
match. 


Ensure that the feature key being 
installed is specifically for this 
director serial number. 


Invalid UDP port number. 


The specified user 
datagram protocol (UDP) 
port number is invalid. 
The number must be an 
integer from 1 through 
65535 inclusive. 


Verify and enter a valid UDP port 
number from 1 through 655535. 
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Message 


Description 


Action 


Invalid value for 
BB_Credit. 


At the Configure Fabric 
Parameters dialog box, 
the buffer-to-buffer credit 
(BB_Credit) value must be 
an integer from 1 through 
60 inclusive. 


Verify and enter a valid number 
between 1 through 60. 


Invalid value for Low BB 
Credit threshold (1-99) 
%. 


The Low BB Credit 
Threshold field in 
Configure Open Trunking 
dialog box must have 
entries in the range from 
1 and 99. This message 
only displays if the 
optional Open Trunking 
feature is installed. 


Enter a value from 1 to 99 into the 
Low BB Credit Threshold field of 
the Configure Open Trunking 
dialog box. 


Invalid value for day 
(1-31). 


At the Configure Date 
and Time dialog box, the 
DD value (day) must be 
an integer from 1 through 
31 inclusive. 


Verify and enter a valid date. 


Invalid value for 
E_D_TOV. 


At the Configure Fabric 
Parameters dialog box, 
the error detect time-out 
value (E_D_TOV) must be 
an integer from 2 through 
600 inclusive. 


Verify and enter a valid number. 


Invalid value for hour 
(0-23). 


At the Configure Date 
and Time dialog box, the 
HH value (hour) must be 
an integer from 0 through 
23 inclusive. 


Verify and enter a valid time. 


Invalid value for minute 
(0-59). 


At the Configure Date 
and Time dialog box, the 
MM value (minute) must 
be an integer from 0 
through 59 inclusive. 


Verify and enter a valid time. 


Invalid value for month 
(1-12). 


At the Configure Date 
and Time dialog box, the 
MM value (month) must 
be an integer from 1 
through 1 2 inclusive. 


Verify and enter a valid date. 
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Message 


Description 


Action 


Invalid value for 
R_A_TOV. 


At the Configure Fabric 
Parameters dialog box, 
the resource allocation 
time-out value (R_A_TOV) 
must be an integer from 
10 through 1200 
inclusive. 


Verify and enter a valid number. 


Invalid value for second 
(0-59). 


At the Configure Date 
and Time dialog box, the 
SS value (second) must 
be an integer from 0 
through 59 inclusive. 


Verify and enter a valid time. 


Invalid value for threshold 
(1-99)%. 


Value entered for each 
port in the Configure 
Open Trunking dialog 
box must be in the range 
from 1 to 99. This 
message only displays if 
the optional Open 
Trunking feature is 
installed. 


Enter a number from 1 to 99 into 
the Threshold % column of the 
Configure Open Trunking dialog 
box. 


Invalid value for year. 


At the Configure Date 
and Time dialog box, the 
YYYY value (year) must 
be a four-digit value. 


Verify and enter a four-digit value 
for the year. 


Invalid World Wide 
Name or nickname. 


The World Wide Name 
or nickname that you 
have specified is invalid. 
The valid format for the 
World Wide Name is 
eight two-digit 
hexadecimal numbers 
separated by colons 
(xx:xx:xx:xx:xx: 
xx:xx:xx). The valid 
format for a nickname is 
non blank characters, up 
to 32 characters. 


Try the operation again using a 
valid World Wide Name or 
nickname. 


Link dropped. 


The HAFM 
appliance-to-director 
Ethernet link was 
dropped. 


Retry the operation. Link 
re-connects are attempted every 
30 seconds. If the condition 
persists, contact the next level of 
support. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Log is currently in use. 


Access to the log is 
denied because the log 
was opened by another 
instance of the Element 
Manager. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 


Loopback plug(s) must be 
installed on ports being 
diagnosed. Press Next to 
continue. 


External loopback 
diagnostics require an 
optical loopback plug to 
be installed. 


Ensure that an optical loopback 
plug is installed in port optical 
transceiver before running external 
wrap diagnostic testing. 


Maximum number of 
versions already 
installed. 


The number of firmware 
versions that can be 
defined to the HAFM 
application's firmware 
library (eight) was 
reached. 


Delete an existing firmware version 
before adding a new version. 


No file was selected. 


Action requires the 
selection of a file. 


Select a file. 


No firmware version file 
was selected. 


A file was not selected in 
the Firmware Library 
dialog box before an 
action, such as modify or 
send was performed. 


Click on a firmware version in the 
dialog box to select it, then 
perform the action again. 


No firmware versions to 
delete. 


There are no firmware 
versions in the firmware 
library to delete, 
therefore the operation 
cannot be performed. 


Informational message only — no 
action is required. 


Nonredundant director 
must be offline to install 
firmware. 


For directors, if the 
director has only one CTP 
card, the director must be 
set offline to install a 
firmware version. 

For switches, since the 
switch has only a single 
CTP card, it must be 
offline to initiate a 
firmware installation. 
Note that the CTP card is 
an internal component 
and not a FRU. 


Set the director or switch offline 
and install the firmware. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Not all of the optical 
transceivers are installed 
for this range of ports. 


Some ports in the 
specified range do not 
have optical transceivers 
installed. 


Use a port range that is valid for 
the ports installed. 


Open Trunking is not 
installed for this product. 
Please contact your sales 
representative. 


The Open Trunking 
feature key has not been 
enabled. This message 
only displays if the 
optional Open Trunking 

£ i i II J 

feature is installed. 


Enter the feature key into the 
Configure Feature Key dialog box 
and enable the key. If you require 
a feature key, see your account 
representative. 


Performing this operation 
will change the current 
state to (Jtthne. 


This message requests 

confirmation to set the 

i- i in* 
director ottlme. 


Click OK to set the director offline 
or click Cancel to cancel the 
operation. 


Performing this operation 
will change the current 
state to Online. 


This message requests 
confirmation to set the 
director online. 


Click OK to set the director online 
or click Cancel to cancel the 
operation. 


Performing this action will 
overwrite the date/time 
on the switch. 


Warning that occurs 
when configuring the 
date and time through the 
Configure Date and Time 
dialog box, that the new 
time or date will 
overwrite the existing 
time or date set for the 
director or switch. 


Verify that you want to overwrite 
the current date or time. 


Periodic Date/Time 
synchronization must be 
cleared. 


Action cannot be 
performed because 
Periodic Date/Time 
Synchronization option is 
active. 


Click Periodic Date/Time 
Synchronization check box in 
Configure Date and Time dialog 
box (Configure menu) to clear 
check mark and disable periodic 
date/time synchronization. 


Port binding was 
removed from attached 
devices that are also 
participating in Switch 
Binding. 


Informational message. 
You removed Port 
Binding from attached 
devices, but one or more 
of these devices is still 
controlled by Fabric 
Binding. 


Review the Switch Binding 
Membership List to determine if the 
devices should be members. 


Port cannot swap to itself. 


Port addresses entered in 
the Swap Ports dialog 
box are the same. 


Ensure that address in the first and 
second Port Address fields are 
different. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Port diagnostics cannot 
be performed on an 
inactive port. 


This displays when port 
diagnostics is run on a 
port in an inactive state. 


Run the diagnostics on an active 
port. 


Port speeds cannot be 
configured at a higher 
rate than the director 
speed. 


This displays when you 
configure a port to 2 
Gb/sec and the director 
speed is set to 1 Gb/sec. 


Set the director speed to 2 Gb/sec 
in the Configure Switch Parameter 
dialog box. 


Port numbers must be in 
the range of 0 to xxx. 


When configuring 
Preferred Paths, source 
ports and exit ports must 
be in the range of ports 
for the switch being 
configured. 


In the Configure Preferred Paths 
dialog box, change the numbers in 
the Source Port and Exit Port fields 
to fall within the port count of the 
switch on which you are 
configuring paths. 


Preferred Paths can not 
be enabled until the 
Domain ID is set to 
Insistent. Disable 
Preferred Paths, then 
configure Switch 
Parameters. 


If the switch's domain ID 
has not been set to 
Insistent, the user is not 
allowed to activate the 
Preferred Path 
configuration with the 
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enable Preferred Paths 
check box selected. 


Close the Configure Preferred 
Paths dialog box and click 
Configure > Operating Parameters 
> Switch Parameters. In the 

Configure Switch Parameters 
dialog box, click the Insistent 
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check box. 


R_A_TOV must be 
greater than E_D_TOV. 


R_A_TOV must be 
greater than E_D_TOV. 


Change one of the values so that 
R_A_TOV is greater than E_D_TOV 


Resource is unavailable. 


The specified operation 
cannot be performed 
because the product is 
unavailable. 


Verify that the Ethernet connection 
between the HAFM appliance and 
the director is up or available. 


Resource is unavailable. 


The specified operation 
cannot be performed 
because the product is 
unavailable. 


Verify that the HAFM 
appliance-to-product link is up. If 
the link is up, the HAFM appliance 
may be busy. Try the operation 
again later. 


SANtegrity Feature not 
installed. Please contact 
your sales representative. 


You selected Switch 
Binding from the 
Configure menu, but the 
optional SANtegrity 
Binding feature is not 
installed. 


Install the SANtegrity Binding key 
through the Configure Feature Key 
dialog box before using Switch 
Binding features. 


Send firmware failed. 


A firmware download 
operation failed. 


Retry the firmware download 
operation. If the problem persists, 
contact the next level of support. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


SNMP trap address not 
defined. 


If an SNMP community 
name is defined, a 
corresponding SNMP 
trap recipient address 
must also be defined. 


Enter a corresponding SNMP trap 
recipient address. 


Stop diagnostics failed. 
The test is already 
running. 


Diagnostics for the port 
was not running and 
Stop was selected on the 
Port Diagnostics dialog 
box. Diagnostics quit for 
the port for some reason, 
but the Stop button 
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remains enabled. 


Verify port operation. Retry 
diagnostics for the port and 
choose Stop from the dialog box. 
If problem persists, contact the next 
level of support. 


Stop diagnostics failed. 
The test was not running. 


This action failed 
because the test was not 
running. 


Informational message. 


Switch Binding was 
removed from attached 
devices that are also 
participating in Port 
Binding. Please review 
the Port Bindina 
Configuration. 


The device WWNs were 
removed from the 
director's Switch 
Membership List 
(SANtegrity Binding 
feature), but you should 
note that one or more of 
these devices still has 
security control in port 
binding. 


Verify that the security level for 
each device is as required by 
reviewing the Bound WWN list in 
the Configure Ports dialog box. 


System diagnostics 
cannot run. The 
Operational Status is 
invalid. 


System diagnostics 
cannot run on switches 
with failed ports 


Replace failed ports. 


The add firmware 
process has been 
aborted. 


You aborted the process 
to add a firmware version 
to the HAFM appliance's 
firmware library. 


Verify the firmware addition is to 
be aborted, then click OK to 
continue. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Switch clock alert mode 
must be cleared before 
enabling period 
synchronization. 


Clock alert mode is 
enabled through the 
Configure FICON 
Management Server 
dialog box and user is 
attempting to enable 
Periodic Date/Time 
Synchronization through 
the Configure Date and 
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1 ime dialog box. 


Disable clock alert mode through 
the Configure FICON 
Management Server dialog box. 


The data collection 
process failed. 


An error occurred while 
performing the data 
collection procedure. 


Try the data collection procedure 
again. If the problem persists, 
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contact the next level ot support. 


The data collection 
process has been 
aborted. 


You aborted the data 
collection procedure. 


Verify the data collection 
procedure is to be aborted, then 
click OK to continue. 


The default zone must be 
disabled to configure. 


The message displays 
when you attempted to 
change the management 
style to Open Fabric and 
the default zone is 
enabled. 


Disable the default zone and 
repeat the operation. 


The Ethernet link 
dropped. 


The Ethernet connection 
between the HAFM 
appliance and the 
director is down or 
unavailable. 


Establish and verify the network 
connection. 


The firmware file is 
corrupted. 


A firmware version file is 
corrupt. 


Contact the next level of support to 
report the problem. 


The firmware version 
already exists. 


This firmware version 
already exists in HAFM 
appliance's firmware 
library. 


Informational message only— no 
action is required. 


The following parameters 
cannot be disabled while 
Enterprise Fabric Mode is 
active: Insistent Domain 
ID, Rerouting Delay, 
Domain RSCNs. 


You attempted to disable 
these parameters in the 
Configure Switch 
Parameters dialog box 
while Enterprise Fabric 
Mode is enabled. 


Disable Enterprise Fabric Mode 
throuqh the Enterprise Fabric 
Mode dialog box in HAFM, then 
disable the parameters. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


The link to the director is 
not available. 


The Ethernet connection 
between the HAFM 
appliance and the 
director is down or 
unavailable. 


Establish and verify the network 
connection. 


The link to the switch is 
not available. 


The Ethernet connection 
between the HAFM 
appliance and the switch 
is down or unavailable. 


Establish and verify the network 
connection. 


The IPL configuration 
cannot be deleted. 


Deletion of the IPL 
address configuration 
was attempted and was 
not allowed. 


Cancel the operation. 


The management server 
is busy processing a 
request from another 
Element Manager. 


The HAFM appliance is 
processing a request from 
another instance of an 
Element Manager, and 
cannot perform the 
requested operation. 


Wait until the process completes, 
then perform the operation again. 


The optical transceiver is 
not installed. 


Information is not 
available for a port 

without an optical 

i t ii j 
transceiver installed. 


Install an SFP optical transceiver in 
the port. 


The switch did not accept 
the request. 


The director or switch 
cannot perform the 
requested action. 


Retry the operation. If the condition 
persists, contact the next level of 
support. 


The maximum number of 
address configurations 
has been reached. 


The maximum number of 
saved address 
configurations has been 
reached. 


Delete configurations no longer 
needed to allow new configuration 
to be saved. 


The switch did not 
respond in the time 
allowed. 


While waiting to perform 
a requested action, the 
director or switch timed 
out. 


Retry the operation. If the condition 
persists, contact the next level of 
support. 


The switch is busy saving 
maintenance information. 


The director or switch 
cannot perform the 
requested action because 
it is busy saving 
maintenance information. 


Retry the operation later. If the 
condition persists, contact the next 
level of support. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


The switch must be offline 
to change the 
Management Style. 


The firmware is below the 
required level and you 
attempted to change the 
management style. 


Choose Set Online State from 
the Maintenance menu and click 
Set Offline. Then change the 
management style. Set the director 
or switch back online when 
finished. 


The switch must be offline 
to configure. 


A configuration changed 
was attempted for a 
configuration requiring 
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otthne changes. 


Take the appropriate actions to set 
the director or switch offline before 
attempting the configuration 
change. 


This feature is not 
installed. Please contact 
your sales representative. 


This feature has not been 
installed. 


Contact your sales representative. 


This feature key does not 
include all of the features 
currently installed and 
cannot be activated while 
the switch is online. 


The feature set currently 
installed for this system 
contains features that are 
not being installed with 
the new feature key. To 
activate the new feature 
key, you must set the 
switch offline. Activating 
the new feature set, 
however, will remove 
current features not in the 
new feature set. 


Set the switch offline through the 
Set Online State dialog box, then 
activate the new feature key using 
the Configure Feature Key dialog 
box. 

The new feature key will display 
both the new features and the 
features that were installed 
previously. 


This feature key does not 
include all of the features 
currently installed. Do 
you want to continue with 
feature key activation? 


The feature set currently 
installed for this system 
contains features that are 
not being installed with 
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the new teature key. 


Click Yes to activate the feature 
key and remove current features 
not in the new feature set or No to 
cancel. 


Threshold alerts are not 
supported on firmware 
earlier than 01.03.00. 


Threshold alerts are not 
supported on firmware 
earlier than 01.03.00. 


Informational message. 


Unable to change 
incompatible firmware 
release. 


You tried to download a 
firmware release that is 
not compatible with the 
current product 
configuration. 


Refer to the product release notes 
or contact the next level of support 
to report the problem. 
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Table 24 Element Manager Messages (continued) 



Message 


Description 


Action 


Unable to save data 
collection file to 
destination. 


The HAFM appliance 
could not save the data 
collection file to the 
specified location (PC 
hard drive, CD, or 
network). 


Retry the operation. If the condition 
persists, contact the next level of 
support. 


You do not have rights to 
perform this action. 


Configured user rights do 
not allow this operation 
to be performed. 


Verify user rights with the 
customer's network administrator 
and change as required. 
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D Configuring remote workstations 



This appendix describes the procedures for installing the HAFM application on a remote 
workstation. To run HAFM on a remote workstation, you must first download and install the HAFM 
application from the HAFM appliance. 

The following sections are described in this chapter: 

• Windows systems, page 225 

• Solaris systems, page 229 

• HP-UX, AIX, and Linux systems, page 231 

Windows systems 

This section describes the procedures for installing HAFM on a remote workstation running 
Windows 2000, Windows NT, or Windows XP. 

Requirements 

The download and installation process requires the use of a personal computer (PC) with the 
following minimum system requirements: 

• Operating system (one of the following): 

• Windows 2000 Professional (with service pack 3) 

• Windows NT 4.0 (with service pack 6a) 

• Windows XP (with service pack la) 

• 1 GHz Pentium III processor 

• 512 MB RAM 

• 350 MB available disk space 

• Video card supporting 256 colors at 800 x 600 resolution 

• Ethernet network adapter 

• Java-enabled Internet browser, such as Microsoft Internet Explorer (version 4.0 or later) or 
Netscape Navigator (version 4.6 or later) 

Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically 
downloaded when the remote client logs in to the appliance. 

Installation procedure 

To install HAFM on a remote workstation: 

1. Obtain the HAFM appliance address from your network administrator. 

2. Open a World Wide Web (WWW) browser. 

3. Enter the HAFM appliance address in the Location (or Address) box on the browser, and then 
press Enter. 
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The HP StorageWorks HAFM remote client installation screen appears. Figure 1 00 shows the 
upper portion of this page. 
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Figure 100 Remote client installation page 

4. Click Begin Windows Installation to begin the installation process. 

5. If you have read the security agreement information and wish to continue, click Yes. 
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The HP High Availability Fabric Manager Available Installers page appears (Figure 101). 
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Figure 101 Available Installers page 

6. Click Download. 

The File Download dialog box appears (Figure 102). 





H*K-'1fe*:an haip volt zw%a4b fthsifchfiMii*! i be+wi 
bote ni^nu. or (rtju do nol+Jy tro* the do nol cpon rr 




Flew* roO*ri*rfSI ems 












Fran 1G 125 31 1 13 






/j\ THi iyp* </ fta caM ham rcu 
mafeooLacooe 






WcufcJ you Hot 10 open Uwlfc or m 


c C in vot** cumpoKr^ 


k 











Figure 102 File Download dialog box 
7. Click Open. 

The system begins downloading the HAFM installer. When the download is complete, the 
Introduction screen appears. 
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[If NOTE: At any time, you may return to the previous page by clicking Previous or quit the Installer by 
clicking Cancel. 



8. Click Next. 

The License Agreement screen appears,. 

9. If you have read the license agreement and agree to accept the terms, click I accept the 
terms of the License Agreement. 

10. Click Next. 

The Important Information screen appears,. 

11. Click Next. 

The Choose Install Folder screen appears. 

12. Perform one of the following actions to select a folder on the remote workstation in which to store 
the HAFM software: 

• Accept the default location. 

• Enter the path to a new location. 

• Click Choose to browse for an appropriate location. 

• Click Restore Default Folder to change the location back to the default folder. 

13. Click Next. 

14. If HAFM is already installed on the system, you are prompted to uninstall the existing version. If 
you want to uninstall the existing software, click Yes and press Next. 

15. When the Uninstall HAFM screen appears, click Uninstall. 

16. When the Uninstall Complete screen appears, click Quit. 

17. The Choose Shortcut Location screen appears. 

18. Select a shortcut location. The options for the location of HAFM icons are: 

• In a new Program Group— Adds a new program group on the Start menu for HAFM. 

• In an existing Program Group— Enables you to select from existing program groups on the 
Start menu for HAFM. 

• In the Start Menu— Puts the HAFM icon on the initial Start menu. 

• On the Desktop— Puts HAFM icons on the Windows desktop. 

• Other— Enables you to choose any location on your hard drive or network for HAFM files. 

• Don't create icons— Prevents the installation from creating an icon for HAFM. 

You can enable the Create Icons for All Users box for some of the shortcut options but not all. If 
you select the check box, the appropriate HAFM icons are placed on the desktop and in the 
Programs folder of every Windows user. If you clear the check box, the icons are created only 
for the current user and are not visible for other user IDs. 

19. Click Next to begin the installation. 

The Pre-lnstallation Summary screen appears. 

20. Review the installation information and click Install. 
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The progress of the installation is tracked on the Installing HP StorageWorks HAFM screen. 
When the installation is complete, the Install Complete dialog box appears. 
21. Click Done to close the Install Complete dialog box. 

Running HAFM 

• If you selected icons to be created in step 1 8 of the installation procedure, access the icon in the 
windows Start menu or desktop to run HAFM. 

• If you did not create any icons in step 1 8 of the installation procedure: 

a. Access the HAFM folder (default location: <lnstall_Home>/h±n/ ) . 

b. Double-click the file hafm_c .bat to run HAFM. 

Solaris systems 

This section describes the procedures for installing HAFM on a remote Solaris workstation. 

Requirements 

The download and installation process requires the use of a workstation with the following minimum 
system requirements: 

• Solaris version 7.0 

• UltraSPARC-Mi processor 

• 512 MB RAM 

• 350 MB available disk space 

• Video card supporting 256 colors at 800 x 600 resolution 

• Network connection 

• Internet browser, such as Microsoft Internet Explorer (version 4.0 or later) or Netscape Navigator 
(version 4.6 or later) 

Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically 
downloaded when the remote client logs in to the appliance. 

Installation procedure 

To install HAFM on a remote workstation: 

1. Obtain the HAFM appliance address from your network administrator. 

2. Open a World Wide Web (WWW) browser. 

3. Enter the HAFM appliance address in the Location (or Address) box of the browser, and then 
press Enter. 

The HP StorageWorks HAFM page appears. 

4. Click Begin Solaris Installation to begin the installation process. 

5. If you have read the security agreement information and wish to continue, click Yes. 

The HP High Availability Fabric Manager Available Installers page appears (Figure 101). 

6. Click Download. The File Download dialog box appears (Figure 102). 
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7. Click Open. 

The system begins downloading the HAFM installer. When the download is complete, the 
Introduction screen appears. 

pf NOTE: At any time, you may return to the previous page by clicking Previous or quit the installation 
by clicking Exit. 



8. Click Next. 

The License Agreement screen appears. 

9. If you have read the license agreement and agree to accept the terms, click I accept the 
terms of the License Agreement. 

10. Click Next. 

The Important Information screen appears. 

11. Click Next. 

The Choose Install Folder screen appears. 

12. Perform one of the following actions to select a folder on the remote workstation in which to store 
the HAFM software: 

• Accept the default location 

• Enter the path to a new location 

• Click Choose to browse for an appropriate location 

• Click Restore Default Location to change the location back to the default 

13. Click Next. 

If HAFM is already installed on the system, you are prompted to uninstall the existing version. If 
you want to uninstall the existing software, click Yes and then click Next. 

When the Uninstall HAFM screen appears, click Uninstall. 

When the Uninstall Complete screen appears, click Quit. 

The Choose Shortcut Location screen appears. 

14. Select a shortcut location. 

The options for the location of HAFM links are: 

• In your home folder— Adds a new program group on the Start menu for HAFM. 

• Other— Enables you to choose any location on your hard drive or network for the HAFM 
files. 

• Don't create links— Prevents the installation from creating a link for HAFM. 

15. Click Next to begin the installation. 

The Pre-lnstallation Summary screen appears. 

16. Review the installation information and click Install. 

The progress of the installation is tracked on the Installing HP StorageWorks HAFM screen. 
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17. If desired, select the Start the High Availability Fabric Manager check box to 
immediately open HAFM. 

18. Click Done to close the Install Complete dialog box. 

Running HAFM 

Run the HAFM program from the directory in which you saved it (the default is a subdirectory 
named HAFM in your home directory). 

In the Terminal window, enter cd HAFM. 

2. Press Enter. 

3. Enter HAFM_Manager. 

4. Press Enter. 

The HAFM application opens. 

HP-UX, AIX, and Linux systems 

This section describes the procedures for installing the HAFM on a remote HP-UX, AIX, or Linux 
workstation. 

Requirements 

The download and installation process requires the use of a PC with the following minimum system 
requirements: 

• Operating system (one of the following): 

• HP-UX 1 1 .Oa 

• AIX minimum version 4.3.3 

• Red Hat 7.3 

• Processor: 

• 400 MHz HA PA-RISC 

• 333 MHz Power3-ll 

• 1 GHz Intel Pentium III 

• 512 MB RAM 

• 350 MB disk space 

• Video card supporting 256 colors at 800 x 600 resolution 

• Ethernet network adapter 

• Java-enabled Internet browser, such as Microsoft Internet Explorer (version 4.0 or later) or 
Netscape Navigator (version 4.6 or later) 

Newer versions of HAFM or Element Managers installed on the HAFM appliance are automatically 
downloaded when the remote clients log in to the HAFM appliance. 

Installation procedure 

1. Open a Terminal window by choosing Terminal from the Personal Applications subpanel. 

2. At the prompt (#), enter netscape and then press Enter. 
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The Netscape browser opens. 

3. Obtain the HAFM appliance address from your network administrator. 

4. Enter the address of the HAFM appliance in the Location (or Address) box of the browser, and 
press Enter. 

The HP StorageWorks HAFM page appears. 

5. Read the instructions for your operating system. 

6. If a reference to fixes is made, click the hyperlink and verify that your system is up to date. 

7. On the HAFM page, click Begin HP-UX Installation/Begin AIX Installation /Begin 

Linux Installation to begin the installation process. 

8. If you have read the security agreement information and wish to continue, click Yes. 

The HP High Availability Fabric Manager Available Installers page appears (Figure 1 01 ). 

9. Click Download. The File Download dialog box appears (Figure 102). 

10. CIick Open. 

The system begins downloading the HAFM installer. When the download is complete, the 
Introduction screen appears. 

1 1. A Save As dialog box appears with the default file name hpClientlnstall .bin. 
Change the file name to /home/hpClientlnstall .bin. 

Click OK. 

The software download begins. 

12. Close the browser window. 

13. In the Terminal window: 

a. Enter cd home. 

b. Press Enter. 

C. EntershhpClientInstall.bin. 
d. Press Enter. 

14. When the download is complete, the Introduction screen appears. 
Be aware that there may be a considerable delay. 

15. Click Next. The License Agreement screen appears. 

[|f NOTE: At any time, you may return to the previous page by clicking Previous or quit the Installation 
by clicking Exit. 



16. If you have read the license agreement and agree to accept the terms, click I accept the 
terms of the License Agreement. 

17. Click Next. 

The Important Information screen appears. 

18. Click Next. 

The Choose Install Folder screen appears. 
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19. Perform one of the following to select a folder on the remote workstation in which to store the 
HAFM software: 

• Accept the default location. 

• Enter the path to a new location. 

• Click Choose to browse for an appropriate location. 

• Click Restore Default Location to change the location back to the default. 

20. Click Next. 

If HAFM is already installed on the system, you are prompted to uninstall the existing version. If 
you want to uninstall the existing software, click Yes and then press Next. 

21. When the Uninstall HAFM screen appears, click Uninstall. 

22. When the Uninstall Complete screen appears, click Quit. 

23. The Choose Shortcut Location screen appears. 
24. Select a shortcut location from this screen. 

The options for the location of HAFM links are: 

• In your home folder— Adds a new program group on the Start menu for the HAFM. 

• Other— Enables you to select any location on your hard drive or network for the HAFM files. 

• Don't create links— Prevents the installation from creating a link for the HAFM. 

25. Click Next to begin the installation. 

The Pre-lnstallation Summary screen appears. 

26. Review the installation information and click Install. 

The progress of the installation is tracked on the Installing High Availability Fabric Manager 
screen. 

27. If desired, select the Start the High Availability Fabric Manager check box to 
immediately open the HAFM. 

28. Click Done to close the Install Complete dialog box. 

Running HAFM 

Run HAFM from the directory in which you saved it. 

1. In the Terminal window, enter cd HAFM 

2. Press Enter. 

3. Enter . /hafm 

4. Press Enter. 

The HAFM application opens. 
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E Reference 



This appendix provides useful reference information. 

• Compatibility with other applications, page 235 

• Icon legend, page 235 

• Event Management, page 239 

• Writing Event Management macros, page 246 

• Keyboard shortcuts, page 249 

Compatibility with other applications 

The application is designed to operate smoothly with other enterprise applications and 
network-monitoring programs. Because this application has fully configurable SNMP trap listening 
and forwarding functions, it can act as a primary or secondary network manager. It can listen for 
trap events on any port and can forward traps to other network management software, enabling 
easy integration into existing systems. 

By default, the application is configured to listen for traps on the standard port, 162. Only one 
software application can control a TCP/IP port at a given time. If the application is not the primary 
network management tool and you plan to run the application on the same computer, you may 
need to reconfigure the application to listen for traps on a different port. For instance, if the primary 
network management software is configured to listen for traps on port 162 and forward them on 
port 3000, reconfigure the application to listen for traps on port 3000. 

Icon legend 

Various icons are used to illustrate devices and connections in a SAN. The following tables list icons 
that appear on the Physical Map. 

Product icons 

The following table lists the SAN product icons that appear on the topology. Some of the icons 
shown in Table 25 only appear when certain features are licensed. In the case of HP devices, if 
another appliance is managing a HP device, the Generic HP icon is displayed. 



Table 25 Product Icons 



Icon Description 


Icon Description 


Host Bus Adapter 
^ (HBA) 


Network Attached 
J Storage (NAS) 


O Swi,ch 


|j Storage 


Bridge 


Hub 

O 
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Table 25 Product Icons (continued) 



Icon | Description 


Icon | Description 


j.-. Unknown 


Tape 


FC|p FCIP Bridge Or 
Gateway 


[>a Lo °p 


iscsi iSCSI Bridge Or 
C^y Gateway 


|^ Appliance 


HP StorageWorks 
C> Edge Switch 2/16 

^^^^ ^ / 


HP StorageWorks 
Edge Switch 2/32 


HP StorageWorks 
Edge Switch 2/24 


Generic HP 
S^jjft StorageWorks 

switch or director 


HP StorageWorks 
^0 Director 2/64 


HP StorageWorks 
Director 2/140 



Product status icons 



Table 26 Product status icons 



Icon 


Status 


No icon 


Operational 


A 


Degraded 


> 


Failed 


□ 


Unknown/Offline 



Event icons 



Table 27 Event icons 



Icon 


Description 




Informational 


A 


Warning 


0 


Fatal 



236 Reference 



Band information status icons 



Table 28 Band information status icons 



Icon 


Out-of-band 


In-band 


Icon 


Out-of-band 


In-band 




Present 


Not Present 




Present 


Present 




Failed 


Not Present 




Present 


Failed 




Not Present 


Present 




Failed 


Present 


4> 


Not Present 


Failed 




Failed 


Failed 



Planned device icons 

Icons of planned devices illustrate the device being unpacked from a box. Table 29 illustrates the 
planned icons for various devices. 

Table 29 Planned device icons 



Icon 


Description 


Icon 


Description 




Planned Host Bus Adapter 
(HBA) 




Planned Network 
Attached Storage (NAS) 




Planned switch 




Planned storage 




Planned hub 




Planned tape 




Planned bridge 




Planned unknown device 




Planned JBOD 




Planned appliance 
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Group icons 

Table 30 Group icons 



Icon 


Description 


Icon 


Description 


#1 


Host 




Isolated group 




Switch 




Bridge 




Loop 




Fabric 



Connections 



S-witch Port 0 
100008Q083A010AD 



Switch Port 31 
1000080033A0E0i0 



Switch Group 
Switch 



Figure 103 Online connection with online devices 

■ 

m : in 



Figure 104 Offline connection and offline loop and storage device 
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[Sf NOTE: In Figure 1 05, gray lines on the HBA indicate no activity on those connections. 




Figure 105 Connection performance as displayed on Physical Map 




Figure 106 Switch on Topology showing ports 

Event Management 

Event Management enables you to specify triggers and actions to automate tasks. For example, 
you can set an event trigger to fire at a certain time and day (everyday at noon) and associate the 
action of sending an e-mail message. 

Event trigger properties 

This section describes the properties you can set for event triggers. 
SNMP trap event properties 

SNMP trap events occur when the appliance receives an SNMP trap. 
Table 31 describes event properties. 
Table 31 SNMP trap event properties 



Property 


Description 


IP Address 


Device's IP address 


Node Name 


Device's world wide name 


Port Name 


Port's world wide name 
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Table 31 SNMP trap event properties (continued) 



Property 


Description 


Source 


The cause of the event (for example, user ID or device label) 


Description 


Event description (for example, Out-of-band offline) 


Event Level 


The severity of the event (for example, informational) 



Table 32 describes the properties of a device in the SAN. 
Table 32 SNMP trap device properties 



Property 


Description 


Label 


Device's label, as shown on the Physical Map 


Name 


Device's name, as specified in the Properties dialog box 


Device Type 


Type of device (for example, HBA) 


Node Name 


Device's world wide name 


IP Address 


Device's IP address 


Vendor 


Device's vendor 


Model 


Device's model 


Serial Number 


Device's serial number 


Port Count 


Device's port count 


Firmware 


Device's firmware level 


Comments 


User-entered comments 


Textl through 
Text4 


User-entered values 


Device Status 


Device's availability (online/offline) 



Table 33 describes the properties of the operating system and the appliance. 
Table 33 SNMP trap system properties 



Property 


Description 


Admin Client Count 


Number of administrator clients logged in to the SAN 


Client Count 


Number of clients logged in to the SAN 


Discovery Off 


Specifies whether discovery is turned on 


Event Notification Off 


Specifies whether event notification is turned on 


Free Memory 


Available physical memory 


IP Address 


Appliance's IP address 


VM Name 


Name of the Java Virtual Machine 


VM Vendor 


Vendor of the Java Virtual Machine 
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Table 33 SNMP trap system properties (continued) 



Property 


Description 


VM Version 


Version of the Java Virtual Machine 


OS Architecture 


Operating system architecture 


OS Name 


Operating system name 


OS Version 


Operating system version 


Server Name 


Name of the appliance 


Subnet Mask 


Discovered subnet mask 


Total Memory 


Total physical memory 


Trap Forwarding Off 


Specifies whether trap forwarding is enabled 


Region 


Region of the world where the user is located 


Time Zone 


User's time zone 


User Count 


Number of users 



Performance event properties 

Performance events occur when the performance at a switch port crosses a user-defined threshold. 
Table 34 describes the event properties. 
Table 34 Performance event properties 



Property 


Description 


Threshold Type 


Performance threshold type (for example, high critical) 


Measure Type 


Performance measurement units 


Port Number 


Port number that encountered an event 


IP Address 


IP address of the device that encountered an event 


Source 


Label of the device where the event occurred 


Node Name 


World wide name of the device that encountered an 
event 


Port Name 


World wide name of the port that encountered an event 


Description 


Description of the performance event 


Event Level 


Severity level 
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Table 35 describes the properties of a device in the SAN. 
Table 35 Performance device properties 



Property 


Description 


Label 


Device's label, as shown on the Physical Map 


Name 


Device's name, as specified in the Properties dialog box 


Device Type 


Type of device (for example, HBA) 


Node Name 


Device's world wide name 


IP Address 


Device's IP address 


Vendor 


Device's vendor 


Model 


Device's model 


Serial Number 


Device's serial number 


Port Count 


Device's port count 


Firmware 


Device's firmware level 


Comments 


User-entered comments 


Textl through Text4 


User-entered values 


Device Status 


Device's availability (online/offline) 



Table 36 describes the properties of the platform and the appliance. 
Table 36 Performance system properties 



Property 


Description 


Admin Client Count 


Number of administrator clients logged in to the SAN 


Client Count 


Number of clients logged in to the SAN 


Discovery Off 


Specifies whether discovery is turned on 


Event Notification Off 


Specifies whether event notification is turned on 


Free Memory 


Available physical memory 


IP Address 


Appliance's IP address 


VM Name 


Name of the Java Virtual Machine 


VM Vendor 


Vendor of the Java Virtual Machine 


VM Version 


Version of the Java Virtual Machine 


OS Architecture 


Operating system architecture 


OS Name 


Operating system name 


OS Version 


Operating system version 


Server Name 


Name of the appliance 


Subnet Mask 


Discovered subnet mask 


Total Memory 


Total physical memory 
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Table 36 Performance system properties (continued) 



Property 


Description 


Trap Forwarding Off 


Specifies whether trap forwarding is enabled 


Region 


The region of the world where the user is located 


Time Zone 


User's time zone 


User Count 


Number of users 



User action event properties 

User action events occur when you change a setting in the appliance. 
Table 37 describes the user action event properties. 
Table 37 User action event properties 



Property 


Description 


Description 


Description of the performance event 


Source 


User ID of the user who performed the action 


IP Address 


IP address of the client from which the action was taken 


Node Name 


World wide name of the device that encountered an 
event 


Port Name 


World wide name of the port that encountered an event 


Event Level 


Severity level of the event (always informational) 



Table 38 describes the user action properties about the platform and the appliance. 
Table 38 User action system properties 



Property 


Description 


Admin Client Count 


Number of administrator clients logged in to the SAN 


Client Count 


Number of clients logged in to the SAN 


Discovery Off 


Specifies whether discovery is turned on 


Event Notification Off 


Specifies whether event notification is turned on 


Free Memory 


Available physical memory 


IP Address 


Appliance's IP address 


VM Name 


Name of the Java Virtual Machine 


VM Vendor 


Vendor of the Java Virtual Machine 


VM Version 


Version of the Java Virtual Machine 


OS Architecture 


Operating system architecture 


OS Name 


Operating system name 


OS Version 


Operating system version 
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Table 38 User action system properties (continued) 



Property 


Description 


Server Name 


Name of the appliance 


Subnet Mask 


Discovered subnet mask 


Total Memory 


Total physical memory 


Trap Forwarding Off 


Specifies whether trap forwarding is enabled 


Region 


Region of the world where the user is located 


Time Zone 


User's time zone 


User Count 


Number of users 



Table 39 describes the properties of a user. 
Table 39 User action properties 



Property 


Description 


ID 


User ID of the user who performed the action 


Role 


Access level of the user who performed the action (for 
example, Admin or Browse) 


Clients For This User 


Number of client sessions open for the specified user 



Device state event properties 

Device state events occur when a device or connection goes online or offline. 
Table 40 describes the properties of a device in a SAN. 
Table 40 Device state event properties 



Property 


Description 


Device Status 


Status of the device (online or offline) 


Discovery Type 


In-band or out-of-band discovery 


Element Type 


A device status event or a link status event 


Source 


Label of the device that encountered an event 


IP Address 


IP address of the device that encountered an event 


Node Name 


World wide name of the device that encountered an 
event 


Port Name 


World wide name of the port that encountered an event 


Description 


Description of the event 


Event Level 


Severity level of the event 
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Table 41 describes the properties about a device in the SAN. 
Table 41 Device state properties 



Property 


Description 


Label 


Device's label, as shown on the Physical Map 


Name 


Device's name, as specified in the Properties dialog box 


Device Type 


Type of device (for example, HBA) 


Node Name 


Device's world wide name 


IP Address 


Device's IP address 


Vendor 


Device's vendor 


Model 


Device's model 


Serial Number 


Device's serial number 


Port Count 


Device's port count 


Firmware 


Device's firmware level 


Comments 


User-entered comments 


Textl through Text4 


User-entered values 


Device Status 


Device's availability (online/offline) 



Table 42 describes the properties about the platform and the appliance. 
Table 42 Device state system properties 



Property 


Description 


Admin Client Count 


Number of administrator clients logged in to the SAN 


Client Count 


Number of clients logged in to the SAN 


Discovery Off 


Specifies whether discovery is turned on 


Event Notification Off 


Specifies whether event notification is turned on 


Free Memory 


Available physical memory 


IP Address 


Appliance's IP address 


VM Name 


Name of the Java Virtual Machine 


VM Vendor 


Vendor of the Java Virtual Machine 


VM Version 


Version of the Java Virtual Machine 


OS Architecture 


Operating system architecture 


OS Name 


Operating system name 


OS Version 


Operating system version 


Server Name 


Name of the appliance 


Subnet Mask 


Discovered subnet mask 


Total Memory 


Total physical memory 
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Table 42 Device state system properties (continued) 



Property 


Description 


Trap Forwarding Off 


Specifies whether trap forwarding is enabled 


Region 


Region of the world where the user is located 


Time Zone 


User's time zone 


User Count 


Number of users 



Writing Event Management macros 

You can write macros for Event Management to add relevant data to the action phrases. The 
following actions allow macros: 

• E-mail 

• Launch 

• Log 

• Message 

When you right-click near the cursor in a text area, a menu of the context property sets appears. 
Select one of the choices to see a list of the available context properties. Select one of the properties 
to insert a bracketed macro at the cursor. 

When the trigger fires, the values for the context properties that you selected are inserted into the 
text in place of the macro. Write the text in such a way that you know what the value is since the 
property name is not inserted along with the value. Example: "The device labeled 
$ { PROPlabel } has come back online. Its Node Name is $ { PROPnodename}". 



df NOTE: Actions that are triggered by a schedule trigger do not have access to Device and Event 
properties since no device is directly involved in triggering the policy. 



Table 43 describes event context properties. 
Table 43 Event context properties 



Property 


Description 


Device Status 


Status of the device (online or offline) 


Discovery Type 


In-band or out-of-band discovery 


Element Type 


A device status event or a link status event 


Threshold Type 


Performance threshold type (for example, high critical) 


Measure Type 


Performance measurement units 


Port Number 


Port number that encountered an event 


IP Address 


IP address of the device that encountered an event 


Source 


Label of the device that encountered an event 
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Table 43 Event context properties (continued) 



Property 


Description 


Node Name 


World wide name of the device that encountered an event 


Port Name 


World-wide name of the port that encountered an event 


Description 


Description of the event 


Event Level 


Severity level of the event 



Table 44 describes the properties about a device in a SAN. 
Table 44 Device context properties 



Property 


Description 


Label 


Device's label, as shown on the Physical Map 


Name 


Device's name, as specified in the Device Properties dialog 
box 


Device Type 


Type of device (for example, HBA) 


Node Name 


Device's world wide name 


IP Address 


Device's IP address 


Vendor 


Device's vendor 


Model 


Device's model 


Serial Number 


Device's serial number 


Port Count 


Device's port count 


Firmware 


Device's firmware level 


Comments 


User-entered comments 


Textl through Text4 


User-entered values 


Device Status 


Device's availability (online/offline) 



Table 45 describes time context properties. 
Table 45 Time context properties 



Property 


Description 


MM:dd:hh:mm:ss 


Specifies date and time by month, day, hour, minute, and 
second. 


hh:mm:ss 


Specifies the time by hour, minute, and second 


raw 


Specifies the time, in milliseconds, since Jan 1, 1970 UTC, 
for example, 1 027966562386 


<User-defined> 


Format from the Java SimpleDateFormat class; refer to 

http://java.sun.eom/j2se/l .3/docs/api/ for additional 


information 
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Table 46 describes the user context properties. 
Table 46 User context properties 



Property 


Description 


ID 


The ID of the user who performed the action 


Role 


The access level of the user who performed the action (for 
example, Admin or Browse) 


Clients for this user 


The number of client sessions open for the specified user 



Table 47 describes the properties about the platform and the appliance. 
Table 47 System context properties 



Property 


Description 


Admin Client Count 


Number of administrator clients logged in to the SAN 


Client Count 


Number of clients logged in to the SAN 


Discovery Off 


Specifies whether discovery is turned on 


Event Notification Off 


Specifies whether event notification is turned on 


Free Memory 


Available physical memory 


IP Address 


Appliance's IP address 


VM Name 


Name of the Java Virtual Machine 


VM Vendor 


Vendor of the Java Virtual Machine 


VM Version 


Version of the Java Virtual Machine 


OS Architecture 


Operating system architecture 


OS Name 


Operating system name 


OS Version 


Operating system version 


Server Name 


Name of the appliance 


Subnet Mask 


Discovered subnet mask 


Total Memory 


Total physical memory 


Trap Forwarding Off 


Specifies whether trap forwarding is enabled 


Region 


Region of the world where the user is located 


Time Zone 


User's time zone 


User Count 


Number of users 



• EXEC context property set— Executes the command that is contained in the macro, and 
then replaces it with the output of that command. 

• FILE context property set— Inserts the contents of the file whose path and file name you 
specify in the macro. 
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Keyboard shortcuts 

You can use the keystrokes shown in Table 48 to perform common functions. 



[If NOTE: To open a menu using keystrokes, press ALT + the underlined letter. To open a submenu, 
release the ALT key first, then press SHIFT + the key for the underlined letter of the submenu 
option. 



Table 48 Keyboard shortcuts 



Menu item or function 


Keyboard shortcut 


All Panels 


F12 


Collapse All 


CTRL + L 


Copy 


CTRL + C 


Cut 


CTRL + X 


Delete 


Delete 


Delete All 


CTRL + Delete 


Expand All 


CTRL + E 


Help 


Fl 


Insert Devices 


CTRL + D 


New Plan 


CTRL + N 


Open Plan 


CTRL + O 


Paste 


CTRL + V 


Product List 


F9 


Properties 


CTRL + P 


Master Log 


F5 


Select All 


CTRL + A 


Select Connections 


CTRL + T 


Event Management 


Fl 1 


View Selected Device's Ports 


F4 


View Physical Map 


F7 


View Utilization Connections 


CTRL + U 
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F Editing batch files 



This appendix provides instructions for updating batch files. It includes: 

• Configuring the application to use dual network cards, page 251 

• Setting the Zoning Delay, page 252 

• Specifying a host IP address in multi-NIC networks, page 252 

• Editing Master Log settings, page 254 

Configuring the application to use dual network cards 

Issues with client-to-server connectivity can be due to different causes. Some examples are: 

• The computer running the application has more than one network card (NIC) installed. 

The computer running the application is behind a firewall that performs network address 
translation. 

In order to ensure that clients can connect to the server, edit the HAFM_sc .bat file to manually 
specify the IP address that the server should communicate to its clients. 

Windows systems 

1. Open the < Tnstall_.ffome>\bin\HAFM_sc .bat file using a text editor. 

2. Find the following lines and add the bold text with one space before and after the text: 

rem HAFM Server 

start %JAVA_HOME%\bin\HAFMServer . exe -server -Xmx512m -Xminf.15 -Xmaxf.35 

-classpath %CLASSPATH% -Dsmp .Mp .max=512 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server / 

-Djava . rmi . server . hostname=x.x.x.x -Dsmp . zoning= legacy 

-Dsmp . zoning .wait . timeout=180000 -Dsmp . webserver -Dsmp . flavor =%APP_FLAVOR% 
Server 

where x.x.x.x is the desired IP address for the appliance 

UNIX systems 

1. Open the < Tristall_ifome>/bin/HAFM_Mgrf ile using a text editor (for example, vi). 

2. Edit all instances of the following lines: 

#SMP Server 

${SAN_JRE_DIR} /bin/ java -classpath ${CLASSPATH} 

-Dsmp . deployment . pref ix=Server / -Dsmp . server . edport=%l 

-DZoning=Principal com . smp . server . SANMgrRMI 
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to read: 



#SMP Server 

${SAN_JRE_DIR}/bin/java -classpath ${CLASSPATH} 
-Dsmp . deployment . pref ix=Server / 
-Djava . rmi . server . hostname=x . x . x . x 

-Dsmp . server . edport=%l -DZoning=Principal 
com. smp . server . SANMgrRMI 

where x . x . x . x is the desired IP address for the Server. 

Setting the Zoning Delay 

Edit the batch file to set the application to configure zoning through either ECC or Telnet. If a 
response is not received within the amount of time specified here, the application ends the 
operation and report that it failed. If the flag is not set, the time-out returns to its default setting of 
180000 ms(180 sec). 



df NOTE: Setting large zones through Telnet can take a long time for large zone sets— 
approximately six seconds for each zone set. 



Windows systems 

1. Open the < Jrzstall_ifome>\bin\HAFM_sc .bat file using a text editor. 

2. Find the following lines and add the bold text with one space before and after the text: 

rem HAFM Server 

start %JAVA_HOME%\bin\HAFMServer . exe -server -Xmx512m -Xminf.15 -Xmaxf.35 

-classpath %CLASSPATH% -Dsmp .Mp .max=512 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi .test -Dsmp . deployment . pref ix= Server / -Dsmp . zoning= legacy 

-Dsmp . zoning . wait . timeout=180000 -Dsmp . webserver -Dsmp . flavor =%APP_FLAVOR% 

Server 

3. Edit the -Dsmp . zoning .wait . timeout entry. Be sure to add a space after your entry. 

4. Save and close the file. 

Specifying a host IP address in multi-NIC networks 

In a network that has two or more NICs, the local host IP returns one of the IPs known to the system. 
To specify which IP is returned, edit the Dsmp . server . edipaddress variable to instruct the 
Trap Event Distributor to use a specific IP address. 

Windows server running as an executable 

1. Open the < lnstall_Home>\bin\HAFVL_sc .bat file using a text editor. 
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2. Edit the following lines: 

rem HAFM Server 

start % JAVA_HOME% \bin\HAFMServer . exe -server -Xmxl2 8m 

-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server / 

-Dsmp . zoning=Principal -Dsmp . zoning .wait . timeout=180000 

-Dsmp . webserver -Dsmp . backupManager 

-Dsmp . locale . customization=en_US_HAFM Server 

to read: 

rem HAFM Server 

start %JAVA_HOME% \bin\HAFMServer.exe -server -Xmxl28m 
-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 
-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server/ 
-Dsmp. server . edipaddress=x,x,x,x -Dsmp . zoning=Principal 
-Dsmp . zoning .wait . timeout=180000 -Dsmp . webserver 
-Dsmp . backupManager 

-Dsmp . locale . customization=en_US_HAFM Server 
where x.x.x.x is the desired IP address. 

Windows server running as a service 

1 . Stop the service. 

2. Uninstall the service. 

3. Edit the following lines in the install_service.bat file 
rem HAFM Server 

start % JAVA_HOME% \bin\HAFMServer . exe -server -Xmxl28m 

-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server / 

-Dsmp . zoning=Principal -Dsmp . zoning .wait . timeout=180000 

-Dsmp . webserver -Dsmp . backupManager 

-Dsmp . locale . customization=en_US_HAFM Server 

to read: 

rem HAFM Server 

start %JAVA_HOME% \bin\HAFMServer.exe -server -Xmxl2 8m 
-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 
-Dsmp .mpi .test -Dsmp . deployment . pref ix= Server / 
-Dsmp. server .edipaddress=x,x,x,x -Dsmp . zoning=Principal 
-Dsmp . zoning .wait . timeout=180000 -Dsmp . webserver 
-Dsmp . backupManager 

-Dsmp . locale . customization=en_US_HAFM Server 

where x.x.x.x is the desired IP address. 

4. Save the file. 



HA-Fabric Manager user guide 253 



Run install_service.bat file. 



Open the <Tnstall_.ffome>/bin/HAFM_Mgr file using a text editor (for example, vi). 
Edit all instances of the following lines: 

#SMP Server 

${SAN_JRE_DIR} /bin/ java -classpath ${CLASSPATH} 
-Dsmp . deployment . pref ix=Server / -Dsmp . server . edport=%l 
-DZoning=Principal com . smp . server . SANMgrRMI 

to read: 

#SMP Server 

${SAN_JRE_DIR} /bin/ java -classpath ${CLASSPATH} 
-Dsmp . deployment . pref ix=Server / 

-Dsmp . server . edipaddress=x, x, x, x -Dsmp . server . edpor t=% 1 
-DZoning=Principal com . smp . server . SANMgrRMI 

where x.x.x.x is the desired IP address. 

Editing Master Log settings 

The application keeps a log of events that occur in the SAN. By default, the event history will be 
kept for 45 days, until 50 MB of disk space is taken up, or when the number of entries reaches 
2000. 

Windows 

1. Open the <lnstall_Home>\bin\HAFM_sc .bat file using a text editor (for example, 
Notepad). 

2. Find the following lines: 

rem HAFM Server 

start %JAVA_HOME% \bin\HAFMServer.exe -server -Xmxl2 8m 

-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 

-Dsmp . Mp . max=12 8 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi . test -Dsmp . deployment . pref ix=Server/ 

-Dsmp . zoning=Principal -Dsmp . zoning .wait . timeout=180000 

-Dsmp .webserver -Dsmp . f lavor=HAFM Server 

3. After the -Dsmp. zoning, wait . timeout line, add the following lines. Be sure to include a 
space before and after each entry. 

• -Dsmp. log .maxLogDiskSpace (maximum space reserved for the log, between 1MB 
and 1 024MB, inclusive) 
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• -Dsmp . log . eventCountAf terTruncate (number of entries to be saved, between 1 
and 2000). 

rem HAFM Server 

start % JAVA_H0ME% \bin\HAFMServer . exe -server -Xmxl2 8m 

-Xminf.15 -Xmaxf.3 5 -Xincgc -classpath %CLASSPATH% 

-Dsmp . Mp . max=12 8 -Dsmp . autodiscovery=f alse 

-Dsmp .mpi .test -Dsmp . deployment . pref ix= Server / 

-Dsmp . zoning=Principal -Dsmp . zoning .wait . timeout=180000 

-Dsmp. log. maxLogDiskSpace=50 

-Dsmp. log. eventCountAf terTruncate=10 00 -Dsmp . webserver 
-Dsmp . flavor =HAFM Server 

Open the < XnstaII_.ffome>/bin/HAFM_Mgr file using a text editor (for example, vi). 

Find all instances of the following lines: 

#SMP Server (xmx and smp.Mp.max should agree) 
${SAN_JRE_DIR} /bin/ java -server -Xmxl28m -classpath 
${CLASSPATH} -Dsmp.Mp.max=12 8 -Dsmp . cal lback . retries=l 0 0 
-Dsun. java2d.noddraw=true -Dsmp. mpi . test 
-Dsmp . deployment . pref ix=Server / -Dsmp . zoning=legacy 
-Dsmp . zoning . wait . timeout=180000 -Dsmp . webserver 
-Dsmp . f lavor=%APP_FLAVOR% Server & -Xmaxf.35 -Xincgc 
-classpath $ (CLASSPATH} -Dsmp .mpi . test 

-Dsmp . deployment . pref ix=Server / -Dsmp . zoning=Principal 
-Dsmp . zoning .wait . timeout=180000 Server 

where %app_flavor% is hafm 

After the -Dsmp. zoning, wait . timeout line, add the following lines. Be sure to include 
a space before and after each entry. 

• -Dsmp. log .maxLogDiskSpace (maximum space reserved for the log, between 1MB 
and 1 024MB, inclusive) 

• -Dsmp . log . eventCountAf terTruncate (number of entries to be saved, between 1 
and 2000). 

-Xmaxf.35 -Xincgc -classpath $ {CLASSPATH} -Dsmp . mpi . test 
-Dsmp . deployment . pref ix=Server / -Dsmp . zoning=Principal 
-Dsmp . zoning .wait . timeout=180000 
-Dsmp. log. maxLogDiskSpace=50 

-Dsmp. log. eventCountAf terTruncate=1000 Server & 
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